Address monitoring method and device
An address and IP address technology, applied in the field of communication, can solve the problem that the machine is easy to become a bottleneck, interfere with the use of legitimate users, attack the machine and network equipment, etc., and achieve the effect of blocking illegal IP address theft in the intranet
Active Publication Date: 2014-10-01
中国移动通信集团陕西有限公司
View PDF4 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
There is also a manual search method: this method needs to log in to the switch to find the MAC address of the corresponding port, log in to the core switch to check the ARP table, the manual method is cumbersome, and it is possible that when the relevant information is found, the illegal embezzler has already left, and effective monitoring cannot be carried out.
[0003] The inventor found that there are at least the following problems in the existing technology: the existing monitoring methods have certain limitations, such as the IP-MAC binding technology user management is very difficult; the transparent gateway technology requires a special machine for data forwarding, and this machine is likely to become a bottleneck
Since the IP address stealer still has complete freedom of activity in the IP subnet, on the one hand, this will interfere with the use of legitimate users; on the other hand, it may be used by the thief to attack other machines and network devices in the subnet
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0025] The preferred embodiments of the present invention will be described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described here are only used to illustrate and explain the present invention, and are not intended to limit the present invention.
[0026] method embodiment
[0027] figure 1 It is a flow chart of Embodiment 1 of the address monitoring method according to the present invention, such as figure 1 As shown, this embodiment includes:
[0028] Step S102: receiving the address resolution protocol (ARP) information of the layer-3 device;
[0029] For example, a layer-3 device may be a core router, a core switch, an aggregation switch, etc., and obtains an ARP table from the layer-3 device, where the ARP table stores the currently used IP address and the IP-MAC mapping relationship.
[0030] Step S104: Obtain the corresponding MAC address according to the IP address in the changed ARP information whe...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses an address monitoring method and an address monitoring device. The method comprises the following steps of: receiving address resolution protocol (ARP)information of three-layer equipment; when the ARP information is changed, acquiring a corresponding multi-access control (MAC) address according to an Internet protocol (IP) address in the changed ARP information; and searching information corresponding to a port MAC address of two-layer and / three-layer equipment according to the MAC address, and acquiring an access equipment port corresponding to the IP address. According to the address monitoring method and the address monitoring device, illegal addresses can be found immediately, and the technical defect that an address embezzlement behavior cannot be prevented fundamentally in the prior art is overcome.
Description
technical field [0001] The invention relates to a service support technology in the communication field, in particular to an address monitoring method and device. Background technique [0002] At present, the common method for most network administrators to discover IP address theft is to regularly scan the Address Resolution Protocol (ARP) table of each router in the network to obtain the IP address currently in use and the IP-MAC comparison relationship, and the legitimate IP address Table, IP-MAC table comparison, if inconsistent, there is illegal access behavior, and then clear the illegal IP in the ARP table. In addition, the misappropriation of the IP address can also be found from the user's fault report (a MAC address conflict prompt will appear if the IP address in use is stolen). On this basis, commonly used defense mechanisms include: IP-MAC binding technology, proxy server technology, IP-MAC-USER authentication and authorization, and transparent gateway technolo...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/12H04L12/24
Inventor 申民马振尊弋鹏翔高芳宋悦罗海星
Owner 中国移动通信集团陕西有限公司