【原創(chuàng)】arp欺騙arp病毒的根本解決方案分享

gouxiongmao

補(bǔ)充說明：

經(jīng)過我N多次的arp病毒解決經(jīng)驗(yàn)總結(jié)，到目前為止尚未發(fā)現(xiàn)像病毒那樣自主傳播的arp病毒，也就是說arp病毒其實(shí)是有人故意使用p2p控制軟件在局域網(wǎng)里搗亂。這類p2p控制軟件最常見的有p2p終結(jié)者、聚生網(wǎng)管、網(wǎng)絡(luò)執(zhí)法官、網(wǎng)絡(luò)剪刀手，還有個(gè)我聽過沒見識過的好像叫網(wǎng)路崗。

zhouyi20080808

不錯(cuò)，頂一下下。

perry001

我也頂！�。�

Yei

ethereal現(xiàn)在改名叫Wireshark了

brokencluster

原帖由 gouxiongmao 于 2008-9-10 13:14 發(fā)表
補(bǔ)充說明：

經(jīng)過我N多次的arp病毒解決經(jīng)驗(yàn)總結(jié)，到目前為止尚未發(fā)現(xiàn)像病毒那樣自主傳播的arp病毒，也就是說arp病毒其實(shí)是有人故意使用p2p控制軟件在局域網(wǎng)里搗亂。這類p2p控制軟件最常見的有p2p終結(jié)者、聚生 ...

1. 
   
2. 12:59:58.880477 arp reply 192.168.0.248 is-at 00:1f:d0:5d:44:af
   
3. 12:59:58.880479 arp reply 192.168.0.249 is-at 00:1f:d0:5d:44:af
   
4. 12:59:58.880481 arp reply 192.168.0.250 is-at 00:1f:d0:5d:44:af
   
5. 12:59:58.880483 arp reply 192.168.0.251 is-at 00:1f:d0:5d:44:af
   
6. 12:59:58.880490 arp reply 192.168.0.252 is-at 00:1f:d0:5d:44:af
   
7. 12:59:58.880492 arp reply 192.168.0.253 is-at 00:1f:d0:5d:44:af
   
8. 12:59:58.880493 arp reply 192.168.0.254 is-at 00:1f:d0:5d:44:af
   
9. 12:59:58.881218 arp reply 192.168.0.254 is-at 00:1f:d0:5d:44:af
   
10. 12:59:58.903204 arp who-has 192.168.0.250 tell 192.168.0.116
    
11. 12:59:58.959169 arp reply 192.168.0.2 is-at 00:1f:d0:5f:0a:d6
    
12. 12:59:58.959174 arp reply 192.168.0.3 is-at 00:1f:d0:5f:0a:d6
    
13. 12:59:58.959294 arp reply 192.168.0.8 is-at 00:1f:d0:5f:0a:d6
    
14. 12:59:58.959297 arp reply 192.168.0.10 is-at 00:1f:d0:5f:0a:d6
    
15. 12:59:58.959299 arp reply 192.168.0.11 is-at 00:1f:d0:5f:0a:d6
    
16. 12:59:58.959301 arp reply 192.168.0.12 is-at 00:1f:d0:5f:0a:d6
    
17. 12:59:58.959303 arp reply 192.168.0.13 is-at 00:1f:d0:5f:0a:d6
    
18. 12:59:58.959305 arp reply 192.168.0.14 is-at 00:1f:d0:5f:0a:d6
    
19. 12:59:58.959307 arp reply 192.168.0.16 is-at 00:1f:d0:5f:0a:d6
    
20. 12:59:58.959309 arp reply 192.168.0.19 is-at 00:1f:d0:5f:0a:d6
    
21. 12:59:58.959311 arp reply 192.168.0.20 is-at 00:1f:d0:5f:0a:d6
    
22. 12:59:58.959313 arp reply 192.168.0.22 is-at 00:1f:d0:5f:0a:d6
    
23. 12:59:58.959315 arp reply 192.168.0.23 is-at 00:1f:d0:5f:0a:d6
    
24. 12:59:58.959318 arp reply 192.168.0.27 is-at 00:1f:d0:5f:0a:d6
    
25. 12:59:58.959320 arp reply 192.168.0.30 is-at 00:1f:d0:5f:0a:d6
    
26. 12:59:58.959322 arp reply 192.168.0.31 is-at 00:1f:d0:5f:0a:d6
    
27. 12:59:58.959324 arp reply 192.168.0.32 is-at 00:1f:d0:5f:0a:d6
    
28. 12:59:58.959326 arp reply 192.168.0.33 is-at 00:1f:d0:5f:0a:d6
    
29. 12:59:58.959330 arp reply 192.168.0.34 is-at 00:1f:d0:5f:0a:d6
    
30. 12:59:58.959332 arp reply 192.168.0.35 is-at 00:1f:d0:5f:0a:d6
    
31. 
    
32. 
    
33. 
    
34. 
    
35. 
    
36. 
    
37. 
    
38.     122 00:1f:d0:5d:49:0a
    
39.     123 00:1f:d0:5d:44:1e
    
40.     123 00:1f:d0:5d:46:a7
    
41.     124 00:1f:d0:5d:44:1e
    
42.     126 00:1f:d0:5d:44:af
    
43.     141 00:1f:d0:5d:42:fd
    
44.     178 00:1f:d0:5f:0a:d6
    

復(fù)制代碼

病毒發(fā)的...
穿還原軟件....

flb_2001

還有,我想問一下ARP病毒能預(yù)防嗎?你講的只是中了之后去處理

xxhe

謝謝分享

gouxiongmao

原帖由 flb_2001 于 2008-9-25 11:27 發(fā)表
還有,我想問一下ARP病毒能預(yù)防嗎?你講的只是中了之后去處理

以前有個(gè)叫AntiArp的軟件可以預(yù)防，現(xiàn)在不知道能不能找到，不過現(xiàn)在你可以安裝360安全衛(wèi)士，那個(gè)軟件里面的保護(hù)有防arp攻擊的功能，我前一陣子用過效果比較明顯，你可以試試。