Address resolution protocol message processing method and device

A technology of address resolution protocol and processing method, which is applied in the direction of digital transmission system, data exchange network, electrical components, etc., can solve the problem of low efficiency of ARP flood attack, improve processing efficiency and protection effect, save overall cost, and accurately Effect of identifying ARP packets

Active Publication Date: 2021-10-08
ZTE CORP
View PDF6 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0013] Embodiments of the present invention provide a method and device for processing address resolution protocol messages, so as to at least solve the problem of low efficiency in preventing ARP flood attacks in related technologies

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Address resolution protocol message processing method and device
  • Address resolution protocol message processing method and device
  • Address resolution protocol message processing method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0039] In this embodiment, a method for processing an address resolution protocol message is provided, image 3 It is a flowchart of a method for processing an address resolution protocol message according to an embodiment of the present invention, such as image 3 As shown, the process includes the following steps:

[0040] Step S302, receiving an Address Resolution Protocol ARP message;

[0041] Step S304, obtaining the priority information of the ARP message according to the preset white list;

[0042] Step S306, sending the ARP message to the central processing unit CPU for ARP learning according to the priority information, wherein the sending bandwidth of the ARP message corresponding to different priority information is different.

[0043] Through the above steps, the address resolution protocol ARP message is received; the priority information of the ARP message is obtained according to the preset white list; the ARP message is sent to the central processing unit CP...

Embodiment 2

[0057] In this embodiment, an apparatus for processing an address resolution protocol message is also provided, and the apparatus is used to realize the above-mentioned embodiments and preferred implementation manners, and what has already been described will not be repeated. As used below, the term "module" may be a combination of software and / or hardware that realizes a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementations in hardware, or a combination of software and hardware are also possible and contemplated.

[0058] Figure 4 is a structural block diagram of an address resolution protocol packet processing device according to an embodiment of the present invention, as Figure 4 As shown, the device includes:

[0059] A receiving module 40, configured to receive an Address Resolution Protocol ARP message;

[0060] Obtaining module 42, for obtaining the priority information of ARP mes...

Embodiment 3

[0067] This embodiment provides a method and device for preventing ARP flood attacks. The device for preventing ARP flood attack of the present embodiment includes the following modules:

[0068] Figure 5 It is a block diagram of the ARP flood attack defense device according to the embodiment of the present invention, including: ARP entry management module 50, control plane security module 52, forwarding table management module 54 and microcode processing module 56, and the relationship between each module is as attached Figure 5 shown. The ARP table item management module is responsible for generating the correct ARP message whitelist filtering table and sending it to the forwarding table management module; the control plane security module is responsible for controlling the speed limit of each level of sending the message to the CPU, and these speed limits are mainly based on the priority The transmission bandwidth is different for different priorities; the forwarding ta...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The present invention provides a method and device for processing an address resolution protocol message, wherein the method includes: receiving an address resolution protocol ARP message; obtaining priority information of the ARP message according to a preset white list; The ARP message is sent to the central processing unit CPU for ARP learning, wherein the sending bandwidth of the ARP message corresponding to different priority information is different. The present invention solves the problem of low efficiency in preventing ARP flood attacks in the related art.

Description

technical field [0001] The present invention relates to the communication field, in particular to a method and device for processing an address resolution protocol message. Background technique [0002] The address resolution protocol (Address Resolution Protocol, ARP for short) in the related art is a TCP / IP protocol for obtaining a physical address according to an IP address. When the host sends information, it broadcasts the ARP request containing the target IP address to all hosts on the network, and receives the return message to determine the physical address of the target; after receiving the return message, store the IP address and physical address in the local ARP In the cache and keep it for a certain period of time, the next request will directly query the ARP cache to save resources. The address resolution protocol is based on the mutual trust of each host in the network. The hosts on the network can send ARP reply messages independently. When other hosts receiv...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/12H04L29/06H04L12/721H04L12/851
CPCH04L45/32H04L47/24H04L61/103H04L63/0245H04L63/1466
Inventor 李洪涛张丽晖殷玲李庆庆
Owner ZTE CORP
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products