遭遇arp攻击，有抓包记录，看不明白求分析分析

天山白雪晴 · 发表于 2023-6-3 18:02

本帖最后由天山白雪晴于 2023-6-3 19:44 编辑

https://wwkk.lanzoup.com/iErkg0y4yftc

今天发现被攻击，已用wireshark进行抓包，尚不清楚什么原因，不知道是不是被人攻击还是什么。求各位大佬分析分析抓包记录

可怕七娃 · 发表于 2023-6-3 18:02

首先，你要了解ARP协议的机制是什么？
答：是Address Resolution Protocol（地址解析协议）的简称，是一个通过用于实现从IP地址到MAC地址的映射，即询问目标IP对应的MAC地址的一种协议。
可以理解成，通过一问（谁的IP地址是XX，请告诉我--我的IP地址是XX）一答（我的IP地址是XX，并且我的MAC地址是XX）的形式，来确定目标IP的MAC地址。"问"是通过广播形式实现，"答"是通过单播形式。
那基于此，我们可以分析一下，抓取的报文（第一段我没有看，我直接用第二段的报文）：
871       65.325530       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
---------“问”，谁的IP地址102。这个时候，你的主机没有102的IP，就不会有响应（其他不是你电脑IP地址的报文，都是同样的情况）
880       66.171435       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
881       66.171448       26:e7:a0:75:70:46       BaustemB_00:0a:0b       ARP       42       192.168.1.106 is at 26:e7:a0:75:70:46
---------“问”，谁的IP地址106。这个时候，你的主机有106的IP，那就会把自己的MAC地址告诉请求方，“答”，我的IP是192.168.1.106，并且我的MAC地址是26-E7-A0-75-70-46（通过这个MAC地址，可以知道你的电脑或交换机是什么品牌，进而可以进行其他扩展）
上面就是ARP的报文分析
但是上面还有其他请求106的IP，为什么就没有响应呢？（例如526行）
答：这是ARP代{过}{滤}理的原理，因为使用了交换机，交换机的配置网段不一致，导致的没有响应。
怎么防，我还没有实践过，以后有机会再分享。

天山白雪晴 · 发表于 2023-6-3 19:26

文件里是第一次抓包后的，以下是第二次抓包后的，192.168.1.106是我

20       0.717958       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
22       1.715825       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
23       1.849773       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.101? Tell 192.168.1.202
37       2.716087       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
39       4.738376       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
40       5.735628       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
41       6.743844       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
43       7.634118       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
44       8.625752       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
45       9.627418       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
46       11.137768       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
47       11.921723       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
48       12.135740       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
49       12.415297       Tp-LinkT_1b:c3:80       Broadcast       ARP       60       Who has 192.168.1.101? Tell 192.168.1.1 (duplicate use of 192.168.1.1 detected!)
51       12.916137       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
52       13.135864       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
53       13.413562       Tp-LinkT_1b:c3:80       Broadcast       ARP       60       Who has 192.168.1.202? Tell 192.168.1.1 (duplicate use of 192.168.1.1 detected!)
54       13.915833       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
73       17.061949       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.101? Tell 192.168.1.202
76       19.625454       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
77       20.382311       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
80       20.616449       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
83       21.375807       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
86       21.592428       Tp-LinkT_1b:c3:80       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.1 (duplicate use of 192.168.1.1 detected!)
87       21.596918       BaustemB_00:0a:0b       Broadcast       ARP       60       Who has 192.168.1.11? Tell 192.168.1.1
88       21.615833       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
89       21.680155       Tp-LinkT_1b:c3:80       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.1 (duplicate use of 192.168.1.1 detected!)
97       21.880224       Tp-LinkT_1b:c3:80       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.1 (duplicate use of 192.168.1.1 detected!)
106       22.374619       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
115       22.459617       ca:80:c0:31:f8:00       Broadcast       ARP       56       Who has 192.168.1.1? Tell 192.168.1.103
118       22.640235       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
155       23.433947       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
171       23.635848       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
203       24.425867       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
209       24.635676       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
221       25.426209       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
237       26.012539       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
248       26.438199       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
257       27.006312       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
269       27.430542       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.100? Tell 192.168.1.202
270       27.436081       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
271       27.449875       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
272       27.474006       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
273       27.497657       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
274       27.521719       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
275       27.537782       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
276       27.557492       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
277       27.581844       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
278       27.597460       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
280       27.623695       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
281       27.645588       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
284       27.674262       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
285       27.689365       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.100? Tell 192.168.1.202
286       27.713750       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
288       27.737751       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
289       27.757459       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
290       27.773779       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
291       27.797910       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
303       27.821813       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.100? Tell 192.168.1.202
307       27.845591       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
308       27.869369       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
309       27.893850       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
310       27.913429       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
311       27.929718       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
312       28.005626       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
322       28.436005       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
332       29.448712       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
349       30.445644       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
352       30.694215       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
368       31.445796       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
378       31.685990       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
400       32.460585       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
401       32.526627       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.101? Tell 192.168.1.202
423       32.685773       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
425       33.075037       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
426       33.153489       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
427       33.253423       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
428       33.353432       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.100? Tell 192.168.1.202
429       33.455804       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
431       33.461742       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
434       33.573490       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
439       33.665648       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
441       33.766098       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.101? Tell 192.168.1.202
449       34.355998       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
452       34.412916       Tp-LinkT_1b:c3:80       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.1 (duplicate use of 192.168.1.1 detected!)
453       34.455736       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
461       35.355808       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
465       35.465374       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
478       36.355626       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
479       36.455521       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
487       37.463714       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
511       38.479142       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
521       38.903332       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
522       38.997620       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
523       39.093491       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
524       39.206058       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
525       39.293485       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
526       39.475903       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
548       40.478276       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
569       41.491687       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
570       41.788264       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
574       42.485573       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
593       42.785597       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
605       43.413747       Tp-LinkT_1b:c3:80       Broadcast       ARP       60       Who has 192.168.1.101? Tell 192.168.1.1 (duplicate use of 192.168.1.1 detected!)
607       43.485708       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
610       43.786046       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
630       44.501673       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
631       44.501673       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
632       44.633540       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
635       44.721503       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
638       44.829118       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
647       44.934045       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
648       44.974060       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
649       44.997799       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
650       45.021579       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
651       45.041512       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
652       45.057511       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
653       45.081544       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
655       45.338896       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
656       45.495582       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
680       46.335820       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
683       46.496322       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
707       47.337958       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
712       47.584545       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
717       47.741915       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.101? Tell 192.168.1.202
726       48.575785       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
736       49.575534       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
744       50.252525       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
745       50.377580       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
746       50.539911       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
747       50.589808       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
756       51.535763       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
757       51.585547       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
764       52.535536       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
766       52.585488       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
774       53.593884       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
777       53.761592       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
782       54.585613       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
786       54.755695       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
790       55.587943       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
792       55.755748       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
796       56.414076       Tp-LinkT_1b:c3:80       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.1 (duplicate use of 192.168.1.1 detected!)
798       56.614020       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
808       57.605502       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
815       58.605751       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
821       59.745848       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
825       60.413850       Tp-LinkT_1b:c3:80       Broadcast       ARP       60       Who has 192.168.1.101? Tell 192.168.1.1 (duplicate use of 192.168.1.1 detected!)
830       60.745549       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
831       61.413914       Tp-LinkT_1b:c3:80       Broadcast       ARP       60       Who has 192.168.1.202? Tell 192.168.1.1 (duplicate use of 192.168.1.1 detected!)
832       61.747509       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
866       64.325794       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
868       65.165615       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
871       65.325530       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
880       66.171435       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.106? Tell 192.168.1.1
881       66.171448       26:e7:a0:75:70:46       BaustemB_00:0a:0b       ARP       42       192.168.1.106 is at 26:e7:a0:75:70:46
1062       68.413912       Tp-LinkT_1b:c3:80       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.1 (duplicate use of 192.168.1.1 detected!)
1081       69.140340       26:e7:a0:75:70:46       Broadcast       ARP       42       Who has 192.168.1.1? Tell 192.168.1.106
1082       69.141992       Tp-LinkT_1b:c3:80       26:e7:a0:75:70:46       ARP       60       192.168.1.1 is at 8c:a6:df:1b:c3:80
1083       69.142304       BaustemB_00:0a:0b       26:e7:a0:75:70:46       ARP       56       192.168.1.1 is at 00:26:40:00:0a:0b
1127       70.551797       BaustemB_00:0a:0c       Broadcast       ARP       60       Who has 192.168.1.103? Tell 192.168.1.202
1871       72.983234       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
2106       73.975466       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
2538       74.975381       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
2614       76.818751       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1
2645       77.815354       BaustemB_00:0a:0b       Broadcast       ARP       56       Who has 192.168.1.102? Tell 192.168.1.1

别审核了，快点过吧

童年低调 · 发表于 2023-6-8 09:27

同样的问题楼主解决了吗

天山白雪晴 · 发表于 2023-6-15 17:58

童年低调发表于 2023-6-8 09:27
同样的问题楼主解决了吗

找师傅解决了，这个帖子审了两天，早解决了（不明白为什么这么慢）

辞年小妖 · 发表于 2023-6-15 19:38

天山白雪晴发表于 2023-6-15 17:58
找师傅解决了，这个帖子审了两天，早解决了（不明白为什么这么慢）

是什么原因造成的啊？

apples1949 · 发表于 2023-6-16 22:50

游戏服？

max918 · 发表于 2023-10-31 22:03

求解决方案分项？怎么弄的？

cn6891353 · 发表于 2024-6-2 16:23

我这理也有这情况，求解决办法，如何处理，

帐号		自动登录	找回密码
密码			注册[Register]

遭遇arp攻击，有抓包记录，看不明白求分析分析

最佳答案