Vote 0 Votes

arp-sk 是一個 ARP 封包產生器, 可產生任意 ARP 封包, 也可指定封包間隔時間,
可用來測試網路環境是否能阻擋 ARP spoofing 這類的攻擊.
網管型 Switch 大都有 ARP inspection 的功能, 可以檢查 ARP 封包的 Source MAC 是否跟 Ethernet 的 MAC 一致,
若不對封包會被 DROP, 如此可以防範大部份的 ARP 攻擊.
arp-sk 作者網頁的後面有提到一些 ARP 攻擊行為, 值得一看.

Leave a comment

About this Entry

This page contains a single entry by Pank published on October 13, 2010 2:16 AM.

Solve Postfix mailbox 2G limit problem was the previous entry in this blog.

Rdesc is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.