ARP攻击局域网免疫器
随意找一台内网机器(如收银机),先装好支持库程序,然后进行以下设置.一:选择网卡,选择网卡后会在信息提示框里显示此网卡的IP等信息,请承认一下。注意假如选择不准确的话监控会不起作用的!
二,设置主机IP和Mac地址。能够dos里输入arp-a命令查询网关Mac地址。注意要大写才起作用!还有一定要设置准确,不然起不了作用不说,选择自动网关维护还会让你掉线的!
三,假如要维护网关的话就勾上‘打开自动网关维护功能’,并设置好IP段,从几号开始,从几号完毕。假如选中自动网关维护的话它会在网络自动播送准确的网关和Mac,这样就不会受病毒的影响了.
四,高档设置是过滤用的,没有特别的需求能够不选.
五,现在点‘开始监控’按钮就能够了。假如有不合法Arp包它会提示你发送者IP和Mac地址,这样就能够查到是那个人在搞鬼了。
六,所做的设置在退出后会自动保留的。
只要是包括主机的Arp播送它会提示注意,而有攻击性质的Arp包它会提示警告!
(Feel free to find an intranet machine (such as a cash register), install the support library program first, and then perform the following settings.
One: Select the network card, after selecting the network card, the information such as the IP of the network card will be displayed in the information prompt box, please acknowledge it. Note that if the selection is not accurate, the monitoring will not work!
Second, set the host IP and Mac address. You can enter the arp-a command in the dos to query the gateway Mac address. Note that uppercase only works! It is also necessary to set it accurately, otherwise it will not work, and choosing automatic gateway maintenance will also make you disconnected!
3. If you want to maintain the gateway, check the "Turn on automatic gateway maintenance function", and set the IP segment, start from the date, and finish from the date. If automatic gateway maintenance is checked, it will automatically broadcast the exact gateway and Mac on the network, so that it will not be affected by viruses.
Fourth, the high-end settings are used for filtering, and there is no special requirement to choose.
Fifth, click the 'Start Monitoring' button now. If there is an illegal Arp packet, it will prompt you the sender's IP and Mac address, so that you can find out who is doing the trick.
Sixth, the settings made will be automatically retained after exiting.
As long as it is an Arp broadcast that includes the host, it will prompt attention, and it will prompt a warning when there is an attacking Arp package!)
页:
[1]