62 results about "Address Resolution Protocol" patented technology

The invention discloses a multi-modal attack identification method fusing BMama and difference to guide trans-attention, which comprises the following steps: simulating a false data injection attack, a denial of service attack, an address resolution protocol spoofing attack and a domain name system spoofing attack, collecting physical layer sensor data and network layer flow data, and preprocessing multi-modal data; bMama is constructed to perform dynamic time modeling on multi-modal data, a graph neural network is combined to adversariate a variational auto-encoder, features of a power grid system topology and a communication topology structure are fused, and robustness of potential representation is enhanced through adversarial training; the method comprises the following steps of: guiding feature complementary fusion by using modal difference through a difference guide iteration cross-attention fusion mechanism, improving the capability of distinguishing complex attacks, finally carrying out attack detection and classification on fused modals, and executing end-to-end optimization according to a weighted combination of loss of each part. The method can effectively detect and classify the multi-modal attack in the smart power grid, and enhances the safety and reliability of a complex system.

The invention relates to an address resolution protocol message sending method and device, computer equipment, a readable storage medium and a program product, relates to the technical field of networks, and can maintain the stability of de-stacking network communication. The method comprises the following steps: determining a plurality of member interfaces aggregated through a server logic interface; the plurality of member interfaces correspond to different message receiving devices; determining a network congestion index corresponding to the logic interface according to the network monitoring data of the plurality of member interfaces, and adjusting an initial index threshold according to the network monitoring data to obtain a current index threshold; if the network state is determined to be a normal state according to the network congestion index and the current index threshold, sending an address resolution protocol message to a plurality of message receiving devices according to a normal processing mode; and if the network state is determined to be a congestion state according to the network congestion index and the current index threshold, sending address resolution protocol messages to a plurality of message receiving devices for multiple times according to a preset time interval through a plurality of member interfaces.

A method for supporting virtual machine (VM) mobility between network devices connected to a network includes: selecting a first type of route for interconnecting VMs that are connected to the network devices; and adding a feature of a second type of route to the first type of route to enable the network devices to execute proxy address resolution protocol (ARP) for transmitting network traffic between the VMs without requiring each of the network devices to store a physical address of each of the VMs in respective ones of a network address table.

The invention relates to the technical field of Internet of Things, and provides an equipment identification method and device, equipment and a medium, which can start a probe to asynchronously initiate an address resolution protocol broadcast request for a target authorized network segment in a sectional manner to generate an active equipment list, and can avoid congestion, thereby accurately detecting active equipment. Performing port detection on each device in the active device list, performing multi-protocol verification on an open port according to a port-protocol adaptive matching mechanism, and performing organization unique identifier analysis on a media access control address of each device in the active device list; the problem of missing detection caused by single protocol broadcasting and port change and the problem of false alarm caused by only organizing unique identifier analysis are solved; and calculating a confidence score of each device according to the fusion features to generate an identification result of each device, so that device identification can be accurately carried out step by step by integrating multi-dimensional factors, and the false alarm rate is effectively reduced.

The invention discloses a water regimen data acquisition dual-machine redundancy method and system, and the system comprises a main machine and a standby machine which are directly connected through an independent heartbeat interface. The main machine periodically sends heartbeat messages and local network configuration information to the standby machine through a heartbeat interface; and the standby machine monitors heartbeat in real time, judges that the main machine is abnormal once not receiving the heartbeat within a preset time, automatically takes over the IP address of the main machine, actively sends an address resolution protocol message according to pre-stored network configuration information so as to quickly update a forwarding table of the network equipment, immediately switches the state of the standby machine to be the main state, and synchronizes the state to a database. According to the method, automatic sub-second fault switching is achieved, the risk of key data loss is greatly reduced, continuity and integrity of water regimen telemetering data are guaranteed, meanwhile, the operation load of a background database is remarkably reduced through a main and standby mode, and the reliability of water regimen telemetering is improved. The problems that the load of the database is too heavy and automatic seamless switching of network channel data acquisition cannot be realized are solved.

A control program executing on a computing device of a computing environment transmits control request information to an adapter module executing within the computing environment. The transmitting uses a control plane transmit queue of a set of queues. The control plane transmit queue identifies a location to store the control request information to be retrieved by the adapter module. The control program receives from the adapter module an indication of another location storing control reply information replying to the control request information. The indication is obtained from a control plane receive queue of the set of queues. The control program retrieves from the another location the control reply information and performs processing based on the control reply information.

One embodiment of the present invention facilitates address resolution protocol (ARP) resolution in an extended subnet. A gateway of a first segment of the extended subnet can determine that a layer-2 address corresponding to a layer-3 destination address of a packet is locally unavailable. The gateway can then determine whether a respective egress interface of an ARP request for the layer-3 destination address is associated with a layer-2 subnet extension from the first segment to a second segment of the extended subnet. The extension can provide a common layer-2 broadcast domain comprising the first and second segments with a same default gateway layer-3 address. If the egress interface is associated with the extension, the gateway can insert a layer-3 address of a first endpoint associated with the extension as a source protocol address in the ARP request. The gateway can send the modified ARP request via the egress interface.

This invention relates to the field of communication technology and discloses a method, apparatus, computer device, and storage medium for monitoring server sub-cards. The method for monitoring server sub-cards includes: after the server is powered on, selecting sub-cards supporting the System Management Bus (SMBus) from multiple sub-cards connected to the same I2C integrated circuit bus to obtain a set of sub-cards to be monitored; assigning an address to each sub-card in the set of sub-cards using the Address Resolution Protocol (ARP); and monitoring the sub-cards in the set of sub-cards based on their assigned addresses. This allows each sub-card in the set of sub-cards to have a different assigned address, thus eliminating the need for switching channels via a switch chip when monitoring the same sub-card, and enabling simultaneous monitoring of the same sub-cards, thereby improving monitoring efficiency.

An access point (AP) in an AP cluster is provided. During operation, the AP can identify a set of Internet Protocol (IP) addresses of permitted devices in a virtual local area network (VLAN) of the AP cluster from a first set of packets. The AP can also identify a set of media access control (MAC) addresses corresponding to the set of IP addresses from a second set of packets. The AP can then generate a whitelist comprising the sets of IP and MAC addresses. The whitelist can indicate addresses of packets permitted to be forwarded via the wireless interface. The AP can identify a target IP address in an Address Resolution Protocol (ARP) request. If the target IP address is absent in the whitelist, the AP can preclude the wireless interface from forwarding the ARP request to clients wirelessly coupled to the wireless interface.

The invention discloses a computing power resource distributed conduction method based on an ARP protocol, and the method comprises the steps: transmitting the application information of a computing power resource and the release information of the computing power resource through employing a reserved field in a request message of the ARP protocol; the release information of the computing power resources explains the release condition of the computing power resources in a standardized encoding mode of the reserved fields, after the router receives the release information of the computing power resources, a cost-end computing power resource release table and application information of the computing power resources are generated, and the application information of the computing power resources is generated in a standardized encoding mode of the reserved fields. The computing power resource application condition is explained, and the router generates a cost-end computing power resource application form after receiving the computing power resource application information. According to the reserved field transmission computing power resource information of the extended ARP protocol, a new protocol does not need to be introduced or a network architecture does not need to be greatly modified, implementation complexity and invasiveness to an existing network are reduced, deployment cost is low, and popularization is easy.

The invention discloses a cross-regional networking system for a 5G private network. In the system, a source terminal sends an ARP (Address Resolution Protocol) request message of a destination terminal address to a network integrated management device through a node gateway of the source terminal; the network integrated management equipment queries a destination terminal according to the ARP request, adds the MAC address of the queried destination terminal and GRE tunnel information into an ARP request message, and sends the ARP request message to a node gateway of the destination terminal; the node gateway of the destination terminal updates an MAC forwarding table according to the MAC address of the destination terminal and GRE tunnel information in the received ARP request message, and feeds back an ARP response to the source terminal through the network integrated management equipment and the node gateway of the source terminal; and the source terminal sends a data message to the destination terminal through the node gateway of the source terminal, the network integrated management equipment and the node gateway of the destination terminal based on the MAC address of the destination terminal. According to the scheme, cross-region unified networking can be kept, and the stability of networking is ensured.

The present invention discloses a dual-homed voice service recovery method and device, wherein the method includes the following steps: pre-configuring the Virtual Routing Redundancy Protocol (VRRP) deployed on the master and backup devices on a passive optical network (PON) link and planning voice services; when triggering a switchover between the master and backup devices on the PON link, dynamically adjusting the VRRP protocol priorities of the master and backup devices to dynamically switch the master and backup device states, and synchronously completing the update of the user-side voice service Address Resolution Protocol (ARP) table entries on the master and backup devices to restore voice services. This application can quickly restore unicast services when the PON link switches, while avoiding user service changes caused by the switching of gateway devices after the link switchover, making user-side service planning more convenient and saving resource consumption.

The invention provides a data center monitoring system which can be applied to the technical field of big data and artificial intelligence. The data center monitoring system comprises a user-defined monitoring item module which is used for providing a graphical configuration interface and enabling a user to add, edit or delete monitoring items in a user-defined mode; the automatic sensing module is used for scanning a target network through an address resolution protocol, judging whether new monitored equipment exists or not, responding to the detected new monitored equipment, and automatically triggering a new monitored equipment identification process; the data acquisition module is used for generating and executing an acquisition task according to the monitoring item; the intelligent operation and maintenance module is used for performing early warning by using the monitoring item prediction model and the equipment prediction model, and generating a safety setting interval of the configuration item in response to the occurrence of monitoring item early warning; and the three-dimensional machine room display module is used for generating a three-dimensional model according to the distribution of the monitored equipment. The invention further provides data center monitoring system equipment, a medium and a program product.

The application provides a network anomaly detection and defense method based on historical state comparison, and belongs to the technical field of computer data processing. In the application, a historical legal network state table and a real-time network state table are acquired, and a double-layer verification logic combining initial screening with internet protocol address indexing and accurate judgment with medium access control address indexing is executed, so that the legality of network behavior can be cross-verified in multidimensional data comparison, normal lease behavior of a dynamic host configuration protocol and network attacks such as address resolution protocol spoofing can be effectively distinguished, the false positive rate of anomaly detection is reduced, and multiple types of network anomaly detection scenes including address resolution protocol spoofing, internet protocol address conflict and multi-address violation are widened.

The embodiment of the invention discloses a communication method between upper computers of a mobile ad hoc network. The method comprises the following steps: respectively creating a node routing table for each node in the mobile ad hoc network; respectively creating an upper computer routing table for each node through an ARP (Address Resolution Protocol) process; and when the nodes in the mobile ad hoc network receive the service data of the source upper computer, determining a communication route according to the locally created node routing table and the upper computer routing table, and transmitting the service data to the target upper computer according to the determined communication route. A node routing table and an upper computer routing table are created for each node in advance, the node obtains a destination node according to the upper computer routing table after receiving upper-layer service data and queries one-hop routing information of the destination node according to the node routing table so as to perform service communication between upper computers, an ARP packet does not need to be sent frequently when routing changes, and the service communication efficiency is improved. The network throughput can be improved by updating the routing information in the node routing table in time, and occupation of more air interface resources caused by increase of the number of upper computers is avoided.

The invention discloses a network interconnection method and related equipment. According to the embodiment of the invention, port states of member ports in a preset link aggregation group of a server can be traversed; when detecting that the port state of the member port is an open state, synchronously sending an address resolution protocol message to each access switch connected with each member port based on each member port in the preset link aggregation group; each access switch obtains the mac address of the server according to the address resolution protocol message, and forwards the mac address of the server to a preset core switch; the core switch determines a routing path according to member ports connected with the access switch, the access switch and the mac address of the server; and the core switch forwards the data packet based on the routing path. According to the invention, the reliability and universality of network interconnection can be improved, and the cost of network interconnection is reduced.

The application relates to a test verification method and device of a solid state disk SMBUS address resolution protocol, computer equipment and a storage medium, wherein the method comprises the following steps: judging whether the UDID of a first solid state disk and a second solid state disk is repeated and whether the UDID meets the definition in the UDID; if the UDID is repeated, the solid state disk is defective and the test is interrupted; judging whether the device slave address of the first solid state disk and the second solid state disk is in conflict; if the device slave address is in conflict, a new unique address is distributed through an address distribution command; the UDID and the new device slave address of the first solid state disk and the second solid state disk are acquired respectively; judging whether the first solid state disk and the second solid state disk are endowed with the new device slave address; if the device slave address followed by the UDID is still the default device slave address, the ARP address distribution fails. The application can quickly and efficiently verify the capability of the solid state disk in SMBUS device slave address conflict and address re-distribution after the conflict.

The invention discloses an automatic IP address allocation method based on an ARP protocol, which comprises the following steps of: on the basis of an original ARP protocol message field, defining a new operator in an original operator field; the software defined packet transport network devices start an ARP protocol, and all the software defined packet transport network devices determine a master device between the interconnection devices through regularly diffusing a protocol frame with a new operator; other equipment which is not selected as the main equipment requests the main equipment to allocate an IP address; after receiving the IP address allocation request, the master device allocates a new IP address in an idle IP address resource pool, and replies the new IP address to the non-master device; and after the non-master device receives the IP address replied by the master device, the IP address is configured to the local system. According to the method, the IP address of the same network segment is automatically allocated to the interconnected software defined packet transport network equipment through the existing protocol message communication mode, the IP address is declared to the routing protocol after the software defined packet transport network equipment is allocated to the IP address, and finally interconnection of the software defined packet transport network equipment in the whole network is realized. The method is an intelligent network opening method.

The invention relates to a host fault detection method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a network data packet connected with a gateway through a layer 2, and analyzing a source address and a destination address of the network data packet; determining the transmission direction of the network data packet according to the source address and the destination address, and updating the flow marking states corresponding to the source address and the destination address in the address resolution protocol table item according to the transmission direction; under the condition that the detection moment arrives, selecting a to-be-detected host according to each flow mark state in the address resolution protocol table item; and sending an address resolution protocol request for each to-be-detected host, determining a fault detection result of the to-be-detected host according to a response condition of the address resolution protocol request, and updating the address resolution protocol table item according to the fault detection result. By adopting the method, the utilization rate of network bandwidth resources can be improved.

The invention discloses an equipment switching method and device suitable for multiple dual homing protocol ring links, and belongs to the technical field of computer networks. The equipment switching method suitable for multiple dual homing protocol ring links comprises the following steps: generating a table clearing message carrying a target virtual local area network based on information of the target virtual local area network under the condition that a target message is received and a home node is configured to be in a target mode; and the table clearing field sends a table clearing message to the convergence layer equipment and a non-home node in the target dual-home protocol annular link, so that the convergence layer equipment and the non-home node clear a media access control table entry and an address resolution protocol table entry corresponding to the target virtual local area network. According to the device switching method and device suitable for multiple dual homing protocol ring links provided by the invention, the problem of communication quality reduction such as packet loss of the DHP ring links caused by device switching of the DHP ring links can be reduced or even avoided.

Methods and systems proxy address resolution protocol processing in a distributive local area network is described. The method for proxy address resolution protocol processing includes sending, by a first subscriber device, an address resolution protocol processing broadcast to obtain a second subscriber device address, wherein the first subscriber device and the second subscriber device are in isolated routing prefix domains within a routing prefix, receiving, by the first subscriber device from a gateway, a second subscriber device proxy address for the second subscriber device, and communicating, between the first subscriber device and the second subscriber device via the gateway, using the second subscriber device proxy address.

The invention discloses a fully active network segment acquisition method and system suitable for multiple non-direct-connection heterogeneous networks, and belongs to the technical field of computer networks, and the method comprises the steps: for each subsidiary company connected with a mother company through a non-direct-connection heterogeneous network, obtaining a router information calling tool and an equipment interface information calling tool in real time from the mother company; obtaining a service network segment table based on a router information calling tool; obtaining an address resolution protocol table based on an equipment interface information calling tool; forming a minimum subnet list based on the service network segment list; based on a preset IP configuration table and a preset maximum effective use duration, screening out a plurality of latest online network addresses from the address resolution protocol table; screening active network segments based on the minimum subnet list and the nearest online network address; and determining the sub-network information of each active network segment as active network segment information, and transmitting the active network segment information to a mother company. According to the invention, the problem of low detection accuracy of the active network segment in the prior art can be solved.

The application relates to the technical field of cloud computing, and discloses a link aggregation method, device and equipment, the method is applied to a cloud private line controller in a cloud private line disassembly and stacking architecture, the method comprises the following steps: acquiring access point information of at least two access point devices; based on the access point information, allocating aggregation information to the at least two access point devices to instruct the at least two access point devices to perform dynamic link aggregation; in the case that the aggregation is successfully established, acquiring table item information of a first access point device; the first access point device is one of the at least two access point devices; the table item information is generated after the first access point device acquires an address resolution protocol of a customer exit device; and synchronizing information is forwarded to a second access point device. The application has low coupling requirements for the access point devices.

The invention discloses a network card monitoring method and device, relates to the technical field of computers, and is used for solving the problem that a server in an auxiliary power state cannot monitor a network card. The method comprises the steps that after a baseboard management controller (BMC) in a server is started, in-place information of all slots in the server is obtained, and the in-place information is used for representing whether cards are inserted into the slots or not; acquiring a first network card identifier of the inserted card based on an address resolution protocol (ARP) address of the inserted card in the slot for indicating the inserted card in the in-place information; and monitoring the network card corresponding to the first network card identifier. According to the scheme, the network card can be monitored in the auxiliary power state of the server.

One aspect of the invention relates to a high-performance computer comprising a plurality of clusters (21, 22) by an IP network (2), each cluster (21, 22) comprising:At least one Ethernet gateway (215, 225) configured to transmit data between the cluster (21, 22) and the IP network (2) storing at least one first routing table comprising at least, for each other cluster of the plurality of clusters (21, 22), an association of a gateway address (215, 225) with a destination IP address comprised in the cluster (21, 22) comprising the gateway (215, 225).A plurality of computing and / or storage nodes (N, 211, 212, 221, 222), each node (N, 211, 212, 221, 222):being configured to run at least one instance of a high-performance computing and / or storage application,comprising at least one network card (NIC1) implementing an Ethernet-based high-performance interconnection protocol and being configured to implement an address resolution protocol, the network card (NIC1) storing at least one second routing table comprising at least, for each other cluster of the plurality of clusters (21, 22), an association of an address of a gateway (215) of the first cluster (21) with the identifier of the other cluster (22) accessible from the gateway (215) of the first cluster (21).storing at least one third routing table comprising at least, for each other cluster of the plurality of clusters (21, 22), an association of an identifier of an application instance with an identifier of the cluster comprising the node (N, 211, 212, 221, 222) running the application instance, with a unique network identifier of the application instance, and with an IP address of the network card (NIC1) of the node (N, 211, 212, 221, 222) running the application instance.At least one intra-cluster interconnection switch (214, 224) configured to connect each node (N, 211, 212, 221, 222) and the gateway (215, 225).

Systems, computer program products, and methods are described herein for implementing real time protocol modifications for address resolutions protocols in a network environment. The present disclosure is configured to identify an address resolution protocol (ARP) cache table comprising an internet protocol (IP) address and a media access control (MAC) address for a communication mapping(s); determine a firewall property(ies) of the ARP cache table for the communication mapping(s); compare the firewall property(ies) to at least one normal firewall property and determine whether the firewall property(ies) is anomalous compared to the normal firewall property(ies); automatically execute a smart contract, wherein the smart contract comprises an authorization protocol(s) for the ARP cache table and an execution of a homomorphic encryption for the ARP cache table; and protect the ARP cache table based on the execution of the smart contract with the authorization protocol(s) and the homomorphic encryption.

The application provides a network fault repair method and system based on multi-protocol detection, and relates to the technical field of network communication, which comprises the following steps: collecting link layer discovery protocol, address resolution protocol, routing table and bidirectional forwarding detection session state information; constructing a directed graph model comprising a plurality of nodes and links; identifying a primary path of current traffic according to the bidirectional forwarding detection session state information, and determining a fault link segment according to the primary path; generating a dynamic state identifier set according to the address resolution protocol, the routing table and the fault link segment; and generating a candidate optimized path according to the directed graph model and the dynamic state identifier set. Three key states, i.e., forwarding reachability, policy blocking and link fault, are accurately identified. The dynamic state identifier set truly reflects the actual carrying capacity of a link to service traffic, and fundamentally avoids the problem of traffic black hole after switching caused by misjudgment of routing reachability, i.e., forwarding reachability.

The present invention discloses a method and system for access control of a distribution communication network. A quantum access controller is used to access the network through an aggregation port, and the media access control address of a power distribution terminal accessing the network is obtained based on the Address Resolution Protocol. The quantum access controller performs a quantum authentication legality check on the power distribution terminal based on the media access control address and a quantum key. If the result is legal, it indicates that the terminal can access the network, and the media access control address in the Address Resolution Protocol information of other network nodes under the layer-2 switch corresponding to the quantum access controller is updated to the media access control address of the power distribution terminal. If the result is illegal, the media access control address in the Address Resolution Protocol information of other network nodes under the layer-2 switch corresponding to the quantum access controller is updated to the media access control address of the quantum access controller, thereby effectively improving the security of the system.

This disclosure provides an Address Resolution Protocol (ARP) attack detection method and system, comprising: sending probe data packets to key network nodes from a host and calculating the round-trip time; determining whether network behavior is abnormal based on the round-trip time; if so, extracting the mapping relationship; obtaining a legitimate mapping benchmark; determining whether the MAC addresses corresponding to the IP addresses are consistent; if so, continuing periodic probing; otherwise, marking cached entries as suspicious infected entries; constructing and sending ARP request data packets to the network based on the IP addresses corresponding to the suspicious infected entries; receiving the ARP request data packets and performing consistency verification; determining whether the consistency verification result contains ARP spoofing attack behavior; if so, performing overwrite repair and converting the repaired entries into static entries; otherwise, continuing periodic probing; otherwise, sending the probe data packets to the key network nodes.

The present application discloses a method, apparatus, and storage medium for synchronizing address resolution protocol entries. The method includes: obtaining a first request sent by a target service board to a master board, parsing the first request to obtain a target entry name, and determining whether there is a target address resolution protocol entry corresponding to the target entry name in the master board; in the case where there is a target address resolution protocol entry, obtaining the current aging time; encapsulating the target address resolution protocol entry and the current aging time into a first response, and sending the first response to the target service board; determining whether there is a historical address resolution protocol entry in the target service board; in the case where there is a historical address resolution protocol entry, synchronizing the target address resolution protocol entry to the historical address resolution protocol entry, and updating the aging time to the current aging time. Through the present application, the problem of service interruption caused by different aging times of the master board and the service board in the related art is solved.