Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Processing method and device for address resolution protocol messages

A technology of address resolution protocol and processing method, which is applied in the direction of digital transmission system, data exchange network, electrical components, etc., can solve the problem of low efficiency of ARP flood attack, improve processing efficiency and protection effect, and accurately identify ARP messages , the effect of saving the overall cost

Active Publication Date: 2018-02-13
ZTE CORP
View PDF11 Cites 11 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0013] Embodiments of the present invention provide a method and device for processing address resolution protocol messages, so as to at least solve the problem of low efficiency in preventing ARP flood attacks in related technologies

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Processing method and device for address resolution protocol messages
  • Processing method and device for address resolution protocol messages
  • Processing method and device for address resolution protocol messages

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0039] In this embodiment, a method for processing an address resolution protocol message is provided, image 3 It is a flowchart of a method for processing an address resolution protocol message according to an embodiment of the present invention, such as image 3 As shown, the process includes the following steps:

[0040] Step S302, receiving an Address Resolution Protocol ARP message;

[0041] Step S304, obtaining the priority information of the ARP message according to the preset white list;

[0042] Step S306, sending the ARP message to the central processing unit CPU for ARP learning according to the priority information, wherein the sending bandwidth of the ARP message corresponding to different priority information is different.

[0043] Through the above steps, the address resolution protocol ARP message is received; the priority information of the ARP message is obtained according to the preset white list; the ARP message is sent to the central processing unit CPU...

Embodiment 2

[0057] In this embodiment, an apparatus for processing an address resolution protocol message is also provided, and the apparatus is used to realize the above-mentioned embodiments and preferred implementation manners, and what has already been described will not be repeated. As used below, the term "module" may be a combination of software and / or hardware that realizes a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementations in hardware, or a combination of software and hardware are also possible and contemplated.

[0058] Figure 4 is a structural block diagram of an address resolution protocol packet processing device according to an embodiment of the present invention, as Figure 4 As shown, the device includes:

[0059] A receiving module 40, configured to receive an Address Resolution Protocol ARP message;

[0060] Obtaining module 42, for obtaining the priority information of ARP mes...

Embodiment 3

[0067] This embodiment provides a method and device for preventing ARP flood attacks. The device for preventing ARP flood attack of the present embodiment includes the following modules:

[0068] Figure 5 It is a block diagram of an ARP flood attack defense device according to an embodiment of the present invention, including: an ARP entry management module 50, a control plane security module 52, a forwarding table management module 54, and a microcode processing module 56. The relationship between each module is as follows: Figure 5 shown. The ARP table item management module is responsible for generating the correct ARP message whitelist filtering table and sending it to the forwarding table management module; the control plane security module is responsible for controlling the speed limit of each level of sending the message to the CPU, and these speed limits are mainly based on the priority The transmission bandwidth is different for different priorities; the forwardin...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a processing method and device for address resolution protocol messages. The method comprises the steps that the address resolution protocol (ARP) messages are received; priority information of the ARP messages is obtained according to a preset white list; and the ARP messages are uploaded to a central processing unit (CPU) for ARP learning according to the priority information, wherein the uploading bandwidths of the ARP messages corresponding to different priority information are different. According to the method and device, the problem that in the related technology,the efficiency of preventing ARP flooding attacks is low is solved.

Description

technical field [0001] The present invention relates to the communication field, in particular to a method and device for processing an address resolution protocol message. Background technique [0002] The address resolution protocol (Address Resolution Protocol, ARP for short) in the related art is a TCP / IP protocol for obtaining a physical address according to an IP address. When the host sends information, it broadcasts the ARP request containing the target IP address to all hosts on the network, and receives the return message to determine the physical address of the target; after receiving the return message, store the IP address and physical address in the local ARP In the cache and keep it for a certain period of time, the next request will directly query the ARP cache to save resources. The address resolution protocol is based on the mutual trust of each host in the network. The hosts on the network can send ARP reply messages independently. When other hosts receiv...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L29/12H04L29/06H04L12/721H04L12/851
CPCH04L45/32H04L47/24H04L61/103H04L63/0245H04L63/1466
Inventor 李洪涛张丽晖殷玲李庆庆
Owner ZTE CORP
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products