Linux系统下ARP数据包截取和分析

Intercepting and Analysing the ARP Packet Based on Linux

利用数据链路层地址解析协议(ARP)可以进行IP冲突、ARP欺骗、ARP溢出等方式的网络攻击.通过研究ARP数据包工作原理,给出了一种高效截包分析的解决方案,并使用了基于BPF和DLPI开发的测试程序进行实现,并在局域网内进行测试.实验表明该方案能解决高效截取和分析数据包.

Via address resolution protocol in data link layer, hackers can launch various attacks, such as IP conflict attack, ARP deceives attack and ARP overflow attack. Research the design of the ARP packet, give an efficient way of breaking down and analyzing it, using a program based on BPF and DLPI, and test it on the LAN. Ensure the experiment successfully Intercept and analyses the packet.