linux下防御arp攻击的策略

王正贤

好东西，顶下。
再更新一下,!!!
再更新一下,!!!

加了一点提示!!!
mac_addr.tar.gz (4.09 KB, 下载次数: 83)  
下载不了。希望管理处理下。

xiangliangyu

大大地学习了。。。我的好好看看网络安全。。。谢了

荒野无灯

回复 NetSeek 的帖子

关于查找一个网段的ip 和mac，有一个小工具叫：nbtscan

在windows和linux下面都可以用。

1. [admin@huangye ~]$ nbtscan
   
2. 
   
3. NBTscan version 1.5.1. Copyright (C) 1999-2003 Alla Bezroutchko.
   
4. This is a free software and it comes with absolutely no warranty.
   
5. You can use, distribute and modify it under terms of GNU GPL.
   
6. 
   
7. Usage:
   
8. nbtscan [-v] [-d] [-e] [-l] [-t timeout] [-b bandwidth] [-r] [-q] [-s separator] [-m retransmits] (-f filename)|(<scan_range>)
   
9.         -v                verbose output. Print all names received
   
10.                         from each host
    
11.         -d                dump packets. Print whole packet contents.
    
12.         -e                Format output in /etc/hosts format.
    
13.         -l                Format output in lmhosts format.
    
14.                         Cannot be used with -v, -s or -h options.
    
15.         -t timeout        wait timeout milliseconds for response.
    
16.                         Default 1000.
    
17.         -b bandwidth        Output throttling. Slow down output
    
18.                         so that it uses no more that bandwidth bps.
    
19.                         Useful on slow links, so that ougoing queries
    
20.                         don't get dropped.
    
21.         -r                use local port 137 for scans. Win95 boxes
    
22.                         respond to this only.
    
23.                         You need to be root to use this option on Unix.
    
24.         -q                Suppress banners and error messages,
    
25.         -s separator        Script-friendly output. Don't print
    
26.                         column and record headers, separate fields with separator.
    
27.         -h                Print human-readable names for services.
    
28.                         Can only be used with -v option.
    
29.         -m retransmits        Number of retransmits. Default 0.
    
30.         -f filename        Take IP addresses to scan from file filename.
    
31.                         -f - makes nbtscan take IP addresses from stdin.
    
32.         <scan_range>        what to scan. Can either be single IP
    
33.                         like 192.168.1.1 or
    
34.                         range of addresses in one of two forms:
    
35.                         xxx.xxx.xxx.xxx/xx or xxx.xxx.xxx.xxx-xxx.
    
36. Examples:
    
37.         nbtscan -r 192.168.1.0/24
    
38.                 Scans the whole C-class network.
    
39.         nbtscan 192.168.1.25-137
    
40.                 Scans a range from 192.168.1.25 to 192.168.1.137
    
41.         nbtscan -v -s : 192.168.1.0/24
    
42.                 Scans C-class network. Prints results in script-friendly
    
43.                 format using colon as field separator.
    
44.                 Produces output like that:
    
45.                 192.168.0.1:NT_SERVER:00U
    
46.                 192.168.0.1:MY_DOMAIN:00G
    
47.                 192.168.0.1:ADMINISTRATOR:03U
    
48.                 192.168.0.2:OTHER_BOX:00U
    
49.                 ...
    
50.         nbtscan -f iplist
    
51.                 Scans IP addresses specified in file iplist.

复制代码

yoyojacky

再加上一个定期检测的操作就更完美了.

sendy-2008

漂过。。。

facyaa

好贴子，先下载下来研究下