交换网络ARP协议欺骗的监听技术分析研究  

Analysis and Research of Switch Network Monitoring Based on ARP Protocol Spoof

作　　者：梁世斌[1] 徐尘[1] 张梁斌[1] 

机构地区：[1]浙江万里学院,宁波315100

出　　处：《浙江万里学院学报》2008年第5期44-47,共4页Journal of Zhejiang Wanli University

摘　　要：利用ARP协议的漏洞进行网络监听是黑客常用的攻击手段之一.文章首先阐述了交换网络下的网络监听技术现状,深入分析了ARP协议的工作原理和存在漏洞;其次,利用WINPCAP数据包捕获机制,给出了一个基于ARP协议欺骗以及恢复的实验模型;最后提出了防范ARP欺骗的几种方法,在实际应用中效果较好.ARP spoof monitoring is one of the hacker＇s attack methods using ARP protocol security loopholes. Firsdy, we describe the current state of network monitoring technology and analyses ARP protocol working principle and existing loophole in detail. Secondly, we make use of WINPCAP data packet capture mechanism and put forward an experimental model of ARP spoof and recovery. Finally, we present many ways of prevention of ARP spoof which achieve great effect in practice.

关 键 词：网络监听 ARP欺骗 WINPCAP 防范 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]