基于Gratuitous ARP泛洪的局域网故障分析

Analysis of LAN Failure According to Gratuitous ARP Flooding

针对一个突发的局域网络故障进行分析,利用捕包工具对故障网络进行数据包分析,排除了人为ARP攻击的可能性。经过详细的解析,确定了网络故障产生的主要原因,打破了ARP攻击都是人为攻击的常规思路。重点从Gratuitous ARP的用途角度分析了网络设备产生Gratuitous ARP及其在特定设备中泛洪的主要原因,从而有针对性地提出了解决问题的方案,并且得到了实际验证。

This paper focuses on the analysis of a sudden LAN failure.Using packet capture tools,we analyzed the data packet from the fault network,and excluded the possibility of human ARP attack based on the analysis result.We confirmed the main cause of network failure,breaking the conventional assumption of ARP attack.The study focuses on the reasons why Gratuitous ARP is produced from specific network equipment and on its flooding damage to the LAN.We put forward solutions to these failures and proved them in an effective way.