Stop update the Arp table [closed]
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 9 years ago.
Improve this questionI have a trouble in my netwo开发者_如何学JAVArk. Somebody in our network runs a sniffer. He gets all data packets. Actually he is a friend of mine. So what I want do is to only stop update my ARP table. like When he is sniffing, all the ARP tables of all machines always update. Does anybody know to stop this? Thank you.
Actually this is the "ARP Vulnerability" problem. The person in your network uses the mechanism on MITM (Man in the Middle) attack to create a route so that the packets that u receive/send is intercepted by him, thus enabling it to sniff your packets. As far as I know this vulnerability has not been resolved because the ARP protocol is "trusting" , which means it does not validate ip-mac pair. Only way to stop is get him off the LAN :)
I don't quite understand your question. When he's sniffing, there should be no change on the ARP table of your machine. Is he sniffing (reading packets as they go through the network), or is he scanning (sending probes and/or strange packets to other machines)?
精彩评论