摘要
文章介绍了局域网内主要网络连接设备中的线索调查分析方法,包括交换机CAM表的获取方法,当遭受攻击时如何在CAM表发现异常线索,进行分析从而定位攻击者;路由器内路由表的获取分析方法,尤其是如何根据路由表绘制拓扑结构图,为办案人员了解分析整个局域网络结构提供帮助。文章最后介绍了如何对常见家庭使用的无线路由器的上网接入点及动态域名线索进行分析。
This paper introduces methods of investigation and analysis of LAN equipment clues, including how to obtain CAM table of switch and how to find abnormal clues in the CAM table to locate the attacker if the switch is attacked; how to analyse and obtain the routing table in a router, especially how to draw the topological structure chart according to routing tables to help the investigators to understand the local area network structure; Finally this paper introduces how to analvse the wireless access ooint and dynamic domain clues for common family wireless routers.
出处
《信息网络安全》
2013年第8期41-44,共4页
Netinfo Security
关键词
局域网
线索分析
交换机
路由器
无线路由器
LAN（local area network）
clue analysis
switch
router
wireless router
