简述ARP协议功能与作用,并抓包分析

《简述ARP协议功能与作用,并抓包分析》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、ARP协议功能与作用ARP,即地址解析协议，实现通过IP地址得知其物理地址。在TCP/IP网络环境下，每个主机都分配了一个32位的IP地址，这种互联网地址是在网际范围标识主机的一种逻辑地址。为了让报文在物理网路上传送，必须知道对方目的主机的物理地址。这样就存在把IP地址变换成物理地址的地址转换问题。以以太网环境为例，为了正确地向目的主机传送报文，必须把目的主机的32位IP地址转换成为48位以太网的地址。这就需要在互连层有一组服务将IP地址转换为相应物理地址。抓包结杲:ARP请求报文No.TimeSourceDestinationProtocolI

2、nfo140732.17314920:89:84:7f:35:eeHangzhou_a5:fl:4fARPWhohas192.168.139.254?Tel192.168.139.11140832.176835Hangzhou_a5:fl:4f20:89:84:7f:35:eeARP192.168.139.254sat00:0f:e2:a5:fl:4f140932.177418Hangzhou_a5:fl:4f20:89:84:7f:35:eeARP192.168.139.254sat00:0f:e2:a5:fl:4f145941.3437841

3、8:67:b0:el:10:lcBroadcastARPWhohas192.168.139.254?Tel192.168.139.21146641.37974018:67:b0:el:10:lcBroadcastARPWhohas192.168.139.254?Tel192.168.139.215Frame1407:42bytesonwre(336bits),42bytescaptured(336bts)JEthernetIIrSrc:20:89:84:7f:35:ee(20:89:84:7f:35:ee),Dst:Hangzhou_a5:fl:

4、4f(00:0f:e2:a5:fl:4f)sAddressResolutionProtocol(request)Hardwaretype:Ethernet(0x0001)Protocoltype:IP(0x0800)Hardwaresize:6Protocolsize:4Opcode:request(0x0001)[Isgratuitous:False]SenderMACaddress:20:89:84:7f:35:ee(20:89:84:7f:35:ee)SenderIPaddress:192.168.139.11(192.168.139.11

5、)TargetMACaddress:Hangzhou_a5:fl:4f(00:0f:e2:a5:fl:4f)TargetIPaddress:192.168.139.254(192.168.139.254)ARP应答报文7o.TimeSourceDestinationProtocolInfo140732.17314920:89:84:7f:35:eeHangzhou_a5:fl:4fARPWhohas192.168.139.254?Tell192.168.139.11140832.176835Hangzhou_a5:fl:4f20:89:84:7f

6、:35:eeARP192.168.139.254isat00:0f:e2:a5:fl:4f140932.177418Hangzhou_a5:fl:4f20:89:84:7f:35:eeARP192.168.139.254isat00:0f:e2:a5:fl:4f145941.34378418:67:b0:el:10:lcBroadcastARPWhohas192.168.139.254?Tell192.168.139.21146641.3797401&67:b0:el:10:lcBroadcastARPWhohas192.168.139.254?

7、Tell192.168.139.21£Frame1408:60bytesonwire(480bits),60bytescaptured(480bits)±EthernetII,Src:Hangzhou_a5:fl:4f(00:0f:e2:a5:fl:4f),Dst:20:89:84:7f:35:ee(20:89:84:7f:35:ee)AddressResolutonProtocol(reply)Hardwaretype:Ethernet(0x0001)Protocoltype:IP(0x0800)Hardwaresize:6Protocolsi

8、ze:4Opcode:reply(0x0002)[Isgratuitous:False]SenderMACaddress:Hangzho