SNIFFER LAN Technology Used In The Detection Of Deception And Solutions ARP

ARP-wide known as Address Resolution Protocol, the Chinese called ARP, which work in the data link layer, the layer and hardware interface links to the upper deck at the same time providing services. ARP for the computer's network IP address into a physical MAC address, its basic function is to target device's IP address, for the target device's MAC address, to ensure the smooth progress of communication.ARP spoofing attacks have become damaged Enterprise Network one of the important reasons. Based on the LAN ARP agreement as the basis for research, analysis of the ARP deception, and the damage caused and to conduct further analysis, in the current ARP to prevent deception of the different methods on the basis of the practical feasibility of Network security point of view of the problems faced by the existing solutions for the analysis and assessment and propose new solutions.Sniffer is to use the computer network interface intercepted destination for the data to other computers, a tool. Its lowest level agreement from the network physical layer, the layer has been applied to the analysis, this technology has been overwhelming majority of analysts are respected and applied. Sniffer able to decode each packet, that the whole package and the structure from the link layer to the application layer information, including serial numbers, source and destination address, summary, the length of time, this ARP to find solution to deceive Has a major role, but it also requires users of the network and a high technical level and has a rich practical experience. Based on this, I have proposed through the analysis of Sniffer log report ARP deceive the automatic analysis, monitoring, early warning and information dissemination programmes, and further the application of fuzzy neural network technology, knowledge base and expert systems, and other related areas of artificial intelligence to further improve ARP deception detection accuracy of the idea.This paper first introduced the ARP agreement theoretical background, and then discussed the Sniffer technology generation, development and basic use, then the adoption of the software log files and found that network in the ARP deception, and be able to automatically search ARP deceive the source, thereby automatically to Administrators issued a notice. This is a further expansion of the scope of application software, inhibit the formation of the ARP deception and reduce the impact, thereby greatly improving the stability of the network. The programme inputs small, good effect. And can further improve and reduce the incidence of false positives and omissions.