ARP协议分析以及安全问题探讨.doc

《ARP协议分析以及安全问题探讨.doc》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、北京信息科技丸学信息管理学院网络管理实验报告ARP协议分析及其安全问题专业名称：信息安全班级：信安1002学号：2010012713姓名：李继文成绩：一、实验目的3二、实验内容3三、分工和实施5四、安全问题分析5五、实验总结8一、实验目的通过使用wireshark进行抓包，然后对丁所抓的包中的ARP(AddressResolutionprotocol)进行分析，从而掌握如何使用抓包进行对未知的协议进行分析。掌握实际分析的方法。二、实验内容实验环境：winxp；实验工具:wireshark(抓包工具)实验内容：i.首先清理背景流量-…关闭具他的联网进程。开始进行分析ii.使用wireshark进

2、行抓包，并且进行ARP过滤FifeEditViewGoCaptureAnalyzeStatisticsTelephonyToolsInternalsHelpSI飙嘛0沔也函＞12(3QG矽尊不殳丨国同回即滋

3、隹Filter：arpVExpression..・ClearSave0・TimeSourceDestinationProtocolLengthInfo丄r乙j丄厶・jojjjvvziioiiiiairim・vw.ljiu八rvr-W“2iian丄二/厶•丄70•厶.4.V/1c142712.6580970HonHaiPrJLb:82:77BroadcastARP60GratuitousAR

4、Pfor192.16E1603丄?・3927560MS-NLB-PhysServer-0BroadcastARP60whohas192.168.2.200?Te165113.6839250HonHaiPrJLb:82:77BroadcastARP60Whohas192.168.1.99?Te'1120322.6665010Fortinet«79:0d:e8BroadcastARP60Whohas192.168.0.1?TeV1129823.6657840Fort1net^79:0d:e8BroadcastARP60Whohas192.168.0.1?Ter1196524.6658720Fort

5、inet_79:Od:e8BroadcastARP60Whohas192.168.0.1?TeV1220226.4355100HonHaiPr_Lb:6b:62BroadcastARP60Whohas192・168・2.189?Te1249227.6765020Fortinet_79:0d:e8BroadcastARP60Whohas192.168.0.1?TeV1255528.0602460HonHaiPr_Lb:82:0eBroadcastARP60Whohas192.168.1.139?T61255628.0607920HonHaiPrJLb:82:78BroadcastARP60Who

6、has192.168.1.251?Te1308428.6764010Fortinet_79:Od:e8BroadcastARP60Whohas192.168.0.1?Tel1483029.6763160Fortinet_79:0d:e8BroadcastARP60Whohas192.168.0.1?Tel1768832.6869660Fort1net_79:0d:e8BroadcastARP60Whohas192.168.0.1?Tel1783533.6866700Fort1net^79:0d:e8BroadcastARP60Whohas192.168.0.1?Tel1797034•68675

7、60Fortinet_79:0d:e8BroadcastARP60Whohas192.168.0.1?Tel1825537.6974440Fort1net_79:Od:e8BroadcastARP60Whohas192.168.0.1?Tel选取其中一条进行分析60Whohas192.168.1.153?42192.168.1.153isat0Cuhn1Q")114C/1卞2085244.0106610MS-NLB-PhysServer-0Foxconn_53:9e:OfARP2085344.0106680Foxconn_53:9e:OfMS-NLB-PhysServer-OARP*7AQ7

8、/IACTQ•AO•/IQr*crrl厂Ann然后进一步对其进行深一步的展开分析:卜Frame20853:42byresonwire(336bits),42bytescaptured(336bits)oninterface0t)EthernetII,Src:Foxconn_53:9e:0f(00:01:6c:53:9e:Of),Dst:MS-NLB-PhysServer-09_0f:79:17:a