Thursday, October 2, 2008

what‘s ARP deception

ARP spoofing has become a cyber cafe operators to undermine the chief culprit, the Internet is a network manager and owner of the scourge.

From the impact of network connections open manner, ARP is divided into two kinds of deception, a router is to deceive the ARP table; and the other is the PC's internal network gateway to deceive.

The first principle is to deceive the ARP - Gateway intercepted data. It's wrong to inform a series of routers with MAC address of the network, and in accordance with a certain frequency, so that the real address can not update information stored in the router, the router, the results of all the data can only be sent to the wrong MAC address, resulting in a normal PC can not be in the picture. The second principle is to deceive the ARP - Gateway forged. Its principle is to establish false Gateway, let it be deceived by the false Gateway PC to the data made, rather than through the normal channels of Internet routers. It seems the PC is not on the network, "the network dropped."

In general, ARP spoofing the very serious consequences, the majority of cases result in a large area dropped. Some of this network manager can not fully understand the failure, that the PC is no problem, dropped the switch did not "competent", nor the broadband telecommunications failures. If the ARP and the first occurrence of deception, as long as the resumption of routers, networking can be fully restored, and that the problem must be in the router. To this end, the broadband router back a lot of "blame."

As a manufacturer of Internet routers, as a last resort to prevent deception ARP has done a lot of copies, the extra work. First, in the broadband router to the PC for all IP-MAC entered into a static form, called routers, IP-MAC binding. Second, the network manager, urged all the network settings on the PC Gateway static ARP, PC machine is called IP-MAC binding. The general requirements of the two manufacturers to do all the work, saying it was a two-way IP-MAC binding.

No comments:

Post a Comment