针对局域网中ARP的攻击,从ARP协议的角度,分析了ARP攻击的原理和它们导致终端用户访问服务器时出现异常中断的情况。同时,围绕该协议内在的缺陷,详细说明了ARP攻击的过程,并利用Libpeap对网络数据进行抓包分析,实现了对ARP攻击的一种有效的检测系统。最后提出了ARP攻击的几种防御方法。
For the ARP attacks and from the point of its protocol, analyzes the principle of ARP attacks and the failed access to server caused by it. Meanwhile, through analysing the deficiency of the protocol, illustrates the ARP attacks course and grabs the data packets by making use of the Libpcap, then realizes a kind of detecting system of ARP attacks effectively. Finally, proposes some solutions and strategies to solve the problem.