ARP_ٶȰٿҵİٿ ҵĹײݸ
      ٶҳ | ¼
    
            ҳ      ֪   MP3   ͼƬ   Ƶ   ٿư
        

ӵѲ ذٶȰٿҳ ༭ 
ARP Ŀ¼
  һʲôARPЭ
  ARPЭĹԭ
  .ARPRARPͷṹ
  ġβ鿴ARP
  塢ARPƭ
  ARP
  ߣõά
  ˡгARP취
 
ַ֪ʱDNSԶΪIPַʵϲҵIPַַôIPַתΪڶַMACַأھУͨARPЭɵġARPЭ簲ȫҪ塣ͨαIPַMACַʵARPƭܹвARPͨʹӦARPЭ顣 
[༭]һʲôARPЭ
ARPȫΪ An Ethernet Address Resolution 
Protocol̫ϵĵַתЭ飬ͨѭЭ飬ֻҪ֪ĳ̨IPַַ֪TCP/IP绷£ÿһ32λIPַַֻʷΧʶһ߼ַΪñ·ϴ֪ͣԷĿַʹڰIPַ任ַĵַת⡣̫ΪΪȷĿͱģĿ32λIPַתΪ48λ̫ĵַҪڻһIPַתΪӦַЭARPЭ顣 
[༭]ARPЭĹԭ
ÿ̨װTCP/IPЭĵﶼһARPIPַMACַһһӦģ總ʾ

A192.168.1.5B192.168.1.1ΪʱAԼARPѰǷĿIPַҵˣҲ֪ĿMACֱַӰĿMACַд֡淢;ͿˣARPûҵӦIPַAͻϷһ㲥ĿMACַǡFF.FF.FF.FF.FF.FFʾͬһڵѯʣ192.168.1.1MACַʲôӦARPѯʣֻBյ֡ʱAĻӦ192.168.1.1MACַ00-aa-00-62-c6-09A֪BMACַͿBϢˡͬʱԼARP´BϢʱֱӴARPҾͿˡARPϻƣһʱеĳһûʹãͻᱻɾԴARPĳȣӿѯٶȡ
ARPͨαIPַMACַʵARPƭܹвARPͨʹֻҪϵķαARPӦܸĿARPеIP-MACĿжϻм˹
ARPҪǴھУһ˸ȾARPľȾARPľϵͳͼͨARPƭֶνػͨϢͨŹϡ
RARPĹԭ
1. һصRARP㲥ڴ˹㲥УԼMACַκյRARPһIPַ
2. ϵRARPյ󣬼RARPбҸMACַӦIPַ
3. ڣRARP͸ԴһӦݰIPַṩԷʹã
4. ڣRARPԴ˲κεӦ
5. ԴյRARPӦϢõõIPַͨѶһֱûյRARPӦϢʾʼʧܡ
6.ڵ1-3бARPķӳͻᱻռãԴͬòRARPӦϢʱǷûӦǷصԴIPռá 
[༭].ARPRARPͷṹ
ARPRARPʹͬıͷṹͼʾ
 
 
͸ʽ
ӲֶΣָ˷ͷ֪Ӳӿֵ̫ͣΪ1
ЭֶΣָ˷ͷṩĸ߲ЭͣIPΪ080016ƣ
ӲַȺЭ鳤ȣָӲַ͸߲ЭַĳȣARPľͿӲЭʹã
ֶΣʾĵͣARPΪ1ARPӦΪ2RARPΪ3RARPӦΪ4
ͷӲַ0-2ֽڣԴӲַǰ3ֽڣ
ͷӲַ3-5ֽڣԴӲַĺ3ֽڣ
ͷIP0-1ֽڣԴӲַǰ2ֽڣ
ͷIP2-3ֽڣԴӲַĺ2ֽڣ
ĿӲַ0-1ֽڣĿӲַǰ2ֽڣ
ĿӲַ2-5ֽڣĿӲַĺ4ֽڣ
ĿIP0-3ֽڣĿIPַ [༭]ġβ鿴ARP
ARPǿԲ鿴ģҲӺ޸ġʾ£롰arp -aͿԲ鿴ARPеˣ總ͼʾ
 
 
arp -a
áarp -dɾARPеݣ
áarp -d +ո+ <ָipַ> ɾָipе
áarp 
-sֶARPָIPַMACַĶӦΪstatic(̬)ӲУǻȻڣѭ̬ڶ̬ԭòԣܵ޷. 
[༭]塢ARPƭ
ʵ˷˲߻ĶARPƭ֡ARPƭѾƻɾӪףϰԱĸ󻼡 
ӰͨķʽARPƭΪ֣һǶ·ARPƭһǶPCƭ 
һARPƭԭǡػݡ֪ͨ·һϵдMACַһƵʲϽУʹʵĵַϢ޷ͨ±·У·ֻܷ͸MACַPC޷յϢڶARPƭԭǡαءԭǽأñƭPCطݣͨ·;PCϲˣˡ 

һ˵ARPƭĺǳأ»ɴߡЩԱԴ˲˽⣬ֹʱΪPCû⣬ûߵġ¡ҲϿϡһARPƭʱֻҪ·ȫָһ·ˡΪˣ·˲١ڹ 

Ϊ·ĳңԷARPƭ˲ٷڡĹһڿ·аPCIP-MAC뵽һ̬У·IP-MAC󶨡ȰԱPCصľ̬ARPϢPCIP-MAC󶨡һ㳧ҪҪΪIP-MAC˫󶨡 

ʾ޸ġַЭ顱(ARP) ʹõĵ̫ IP ƻַֻڰװ TCP/IP Э֮ſá 
arp -a [inet_addr] [-N [if_addr] 
arp -d inet_addr [if_addr] 
arp -s inet_addr ether_addr [if_addr] 
 
-a 
ͨѯ TCP/IP ʾǰ ARP ָ inet_addrֻʾָ IP ַ 
-g 
 -a ͬ 
inet_addr 
ԼӵʮƱָ IP ַ 
-N 
ʾ if_addr ָ ARP  
if_addr 
ָҪ޸ַתӿڵ IP ַеĻڣʹõһõĽӿڡ 
-d 
ɾ inet_addr ָ 
-s 
 ARP  IP ַ inet_addr ַ ether_addr ַַָ6 
ʮֽڸʹôʮƱָ IP ַԵģڳʱںԶӻɾ 
ether_addr 
ַָ [༭]ARP
ARPƭľжΪʹþʱͻȻߣһʱָֻͻ״̬ƵƵ죬ûƵIEƵԼһЩֹϵȡ֤ͨģͻȻֿ֤޷pingͨأMS-DOSarp 
-dֿɻָ
ARPƭľֻɹȾһ̨ԣͿܵ޷صܴ̱ľʱ˻ᵼͬһڵûʱʱ⣬ȡû롣ȡQQ롢ȡϷ˺ȥǮף˺Ƿ׻ȣľĹüû˺ܴĲ;޴ľʧ 
[༭]ߣõά
ϣĿǰARPǰIPMACʹARPҲ˾ARPܵ·Ǻǣ˽ַ 
3.1 ̬ 
õķIPMAC̬󶨣ڰضIPMAC󶨡 
ƭͨARPĶ̬ʵʱĹƭǰARPȫΪ̬ԽPCƭͬʱҲҪIPMACľ̬󶨣˫󶨲űȽϱա 

 
ÿ̨IPMACַ̬󶨡 
ͨarp -sʵ arp Cs IP MACַ  
磺arp Cs 192.168.10.1 AA-AA-AA-AA-AA-AA 
óɹPCִͨ arp -a Կصʾ 
Internet Address Physical Address Type 
192.168.10.1 AA-AA-AA-AA-AA-AA static(̬)
һ㲻,ڶ̬£ 
Internet Address Physical Address Type 
192.168.10.1 AA-AA-AA-AA-AA-AA dynamic(̬)
˵кܶ500̨1000̨...ÿһ̨ȥ̬󶨣Ƿǳġ־̬󶨣ڵÿ󣬶ڰ󶨣ȻҲһļǻǱȽ鷳ģ 

3.2 ʹARP 
ĿǰARPķıȽ϶ˣʹñȽϳõARPҪARPߣAntiarpȡǳ˱ARP⣬ĹԭһƵ㲥ȷARPϢǻ˵Сߡ 

3.2.1 ARP 
5ܣ 
?
A. IP/MAC嵥 
ѡǵҪáǶҪǿ 
IP/MACɨ衣ɨĿǰеĻIPMACַʱɨ裬ΪΪ֮ARPĲա 
֮ĹܶҪ֧֣ʾ޷ȡIPMACʱ˵ıûӦݡ 
? 
B. ARPƭ 
ܻһֱǷPCðڵIP԰ҪIP赽棬磬·ӰҪʵĻIP 
()ARPƭ¼⣺ 
Timeʱʱ䣻 
senderƭϢIPMAC 
RepeatթϢ͵Ĵ 
ARP infoָƭϢľ.ӣ 
time sender Repeat ARP info 22:22:22 192.168.1.22 1433 192.168.1.1 is at 
00:0e:03:22:02:e8 
Ϣ˼ǣ22:22:22ʱ,⵽192.168.1.22ƭϢѾ1433Σ͵ƭϢǣ192.168.1.1MACַ00:0e:03:22:02:e8 

򿪼⹦ܣԱIPƭʾ԰ʾ鵽ARPƭĸԴʾһ䣬κλðIPMACԼʹʾĳIPMACڷƭϢҲδ100׼ȷ벻ҪԱĳЩ⡣ 

? 
C. ά 
ֱܿӽARPƭĵ⣬ǲ뷽ԭڲͣĹ㲥ƶIPȷMACַ 
ƶά󡱵ıҪIPƵʾÿ뷢Ͷٸȷİлǿҽ龡ٵĹ㲥IPٵĹ㲥Ƶʡһ1ξͿԣûаIP£ARPƭõ50100Σе߿øߣʵֿٽARPƭ⡣ARP⣬󶨷 

? 
D. ·־ 
ռ·ϵͳ־ȹܡ 
? 
E. ץ 
ץʽ.cap 
3.2.1 Antiarp 
Ƚϼ򵥣Ϊռʹ÷ 
A. 
IPַۻȡصַݽʾصMACַ[Զ]ɱǰصͨŲᱻע⣺ARPƭʾ˵߷ARPƭݰȡݰ׷ٹԴסߵMACַMACַɨҳIP 
ӦMACַ 
B. IPַͻ 
ƵĳIPַͻ˵ƵARPƭݰŻIPͻľ棬Anti ARP SnifferԷֹ๥ 
C. Ҫ֪ͻMACַWindows¼Щ󡣲鿴巽£ 
һ[ҵĵ]--[]--[¼鿴]--[ϵͳ]--鿴ԴΪ[TcpIP]---˫¼Կʾַͻ¼˸MACַ븴ƸMACַAnti 
ARP 
SnifferıMACַ(ע⽫:תΪ-)֮[ַͻ]ΪʹMACַЧñȻCMDIpconfig 
/all鿴ǰMACַǷ뱾MACַеMACַʧϵɹٻʾַͻ 
ע:ָĬMACַ,[ָĬ],ΪʹMACַЧñȻ 
3.3 ARPܵ· 
·ǰ˵ĺ٣·ᵽARPܣʵԭǶڵķԼȷARPϢ·ֹܶϵĹǲܽġ 

ARPǵߣһ²ҪһʱڿԻظΪARPƭϻʱģϻʱͻԶĻظڴ·ںܶʱڲͣ㲥ԼȷARPϢʹƭظֹARPƭ(ʵʱ̵ܴܶƭARP1иǧ)ǲϵķARPƭֹʹ·Ϲ㲥ȷİҲᱻĴϢû 

ʣҲԷͱƭ߸ȷARPϢÿ뷢1000ARPƭǾÿ뷢1500ȷARPϢ 
ʣϸ룬˺ܴн˺ܶ豸豸ȥЩ㲥Ϣʹòˬ˵˻Ӱ쵽ǹѧϰARP㲥Դ˷Ѻռá⣬ץݰҲֺܶARP㲥ԷҲһӰ졣 
[༭]ˡгARP취
ӴARPʵǲִP2Pս֮ɵģĿʵǷһЩ߳صƩѸסFlashgetȣһʹþʹãӶﵽԼռ󲿷ԴĿġϱߵȥͦ鷳ģһ㣬װһARPǽ߿ARPһ㶼ܽ360ȫʿʵʱѡġARPءֻҪһѡܶⶼӭж⡣ 

ٶȰٿеĴݽοҪ
ڷɡҽѧ򣩣ѯרҵʿ 
а
 չĶ
  1.arp 
  2.ȰװARPǽڶɾC:\WINDOWS\system32\ NPPTools.dll ϵͳļ 
  []ش
   
  ЭǩRADIUSSNMPUDP·ѡϢЭICMPPPPOEIPXTCPInternetЭPPTPַתЭBOOTPPOP3SMTP
  ι˾NTPRTPRTSPDHCPIPRDPHDLCCDP 
  ŷࣺ
  磬Э

   ༭ߣ 
  wanpgë̡qweasdzxc4985zyc1234321١wzhkkk2008cwkackѼ001pandelixxiaoruo_4509 

ΪһƣٿƻӭҲ༭    ڿʼ༭ǰѧϰα༭
  ARPӢʵеĽ(Դٶȴʵ)
  ARP
  abbr.
  1. =Address Resolution Protocol ԡARPЭ(νʵַת߼ַ֮Э)
  2. =Active Recording Program ԡ¼ͳ
Լ  
༭29   ʷ汾
£2009-03-13
ߣnadir 
&copy; Baidu Ȩ
  