基于ARP协议的网络监听技术研究  

Network monitoring method based on ARP protocol

作　　者：曾光裕[1] 薛莹莹[1] 徐冰[1] 李清宝[1] 

机构地区：[1]解放军信息工程大学信息工程学院,河南郑州450002

出　　处：《计算机工程与设计》2009年第14期3269-3271,共3页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2006AA01Z404)

摘　　要：为有效解决交换式局域网内的监听问题,分析了这类局域网的工作原理,并结合考虑在不同操作系统环境下运行的因素,提出了基于改进的ARP协议监听方法。该方法与以往方法不同,通过向通信双方发送ARP广播数据包来实现监听,有效避免了受操作系统环境因素的限制,增强了算法的通用性能力。实验结果表明,该方法较以往方法更有效,具有一定的实用价值。To solve the problem of monitoring in switched LAN effectively, principles of switched LAN are analyzed, and factor of working on different operating system is also taken into consideration. A new monitoring method based on ARP protocol is proposed. To prevent the limit of operating system problem and improve the application capability, this method that is different with old one realizes the aim through by sending ARP REQUST data packets to the both communication sides. Experiments showed that the proposed method can work more effectively than old method and has a practical value.

关 键 词：交换网络 地址解析协议 ARP欺骗 网络监听 WINPCAP 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]