109 results about "Address Resolution Protocol" patented technology

The invention discloses a multi-modal attack identification method fusing BMama and difference to guide trans-attention, which comprises the following steps: simulating a false data injection attack, a denial of service attack, an address resolution protocol spoofing attack and a domain name system spoofing attack, collecting physical layer sensor data and network layer flow data, and preprocessing multi-modal data; bMama is constructed to perform dynamic time modeling on multi-modal data, a graph neural network is combined to adversariate a variational auto-encoder, features of a power grid system topology and a communication topology structure are fused, and robustness of potential representation is enhanced through adversarial training; the method comprises the following steps of: guiding feature complementary fusion by using modal difference through a difference guide iteration cross-attention fusion mechanism, improving the capability of distinguishing complex attacks, finally carrying out attack detection and classification on fused modals, and executing end-to-end optimization according to a weighted combination of loss of each part. The method can effectively detect and classify the multi-modal attack in the smart power grid, and enhances the safety and reliability of a complex system.

A method and an electronic device for traffic tunneling in a distributed network for detecting malicious content are provided. The method comprises: transmitting, to a central server, a request for receiving a gateway data from a given gateway; in response to receiving the gateway data, adding the given gateway as a peer to a WireGuard interface of an electronic device; transmitting, to the central server, an Address Resolution Protocol (ARP) probe which is indicative of whether the electronic device is ready to establish a p2p connection with the given gateway; in response to receiving a response to the ARP probe, updating the gateway data in a neighbor table hosted on the given emitter; transmitting an outgoing traffic packet to the given gateway for natting; in response to receiving, from the given gateway, an incoming traffic packet, analyzing a content of the incoming traffic packet for maliciousness.

The invention relates to the field of intelligent power grids, and discloses a self-adaptive topology model construction method based on Ethernet frames, which comprises the following steps of: S1, carrying out initialization operation on a device, acquiring interval identification codes of all line switch intervals of the device, including opposite side identification codes and local side identification codes, and according to an I generation rule of an adjacent switch device, generating an I generation rule; calculating the IP address of the adjacent switching device of the line switch; s2, triggering an ARP (Address Resolution Protocol) broadcast packet, obtaining an MAC (Media Access Control) address of the IP address in the local area network through the ARP, and associating the interval identification code, the IP address and the MAC address of the adjacent switch to generate an association table; and S3, establishing communication of the adjacent power distribution terminals through the association table of the interval identification codes, and then determining interval switches of the adjacent power distribution terminals according to the interval serial numbers in the interval identification codes so as to establish the FA topology. The topology establishment of the intelligent distributed FA is realized through the identification code parameters, and the debugging work and the subsequent operation and maintenance work of the intelligent distributed FA are simplified.

The invention relates to an address resolution protocol message sending method and device, computer equipment, a readable storage medium and a program product, relates to the technical field of networks, and can maintain the stability of de-stacking network communication. The method comprises the following steps: determining a plurality of member interfaces aggregated through a server logic interface; the plurality of member interfaces correspond to different message receiving devices; determining a network congestion index corresponding to the logic interface according to the network monitoring data of the plurality of member interfaces, and adjusting an initial index threshold according to the network monitoring data to obtain a current index threshold; if the network state is determined to be a normal state according to the network congestion index and the current index threshold, sending an address resolution protocol message to a plurality of message receiving devices according to a normal processing mode; and if the network state is determined to be a congestion state according to the network congestion index and the current index threshold, sending address resolution protocol messages to a plurality of message receiving devices for multiple times according to a preset time interval through a plurality of member interfaces.

The invention relates to the technical field of cloud computing, in particular to a method and a system for realizing ARP (Address Resolution Protocol) attack prevention of a credential operating system without occupying CPU (Central Processing Unit) resources, which comprises the following steps of: directly taking over an RX direction data packet of a network card by utilizing an XDP (Extensible Data Processing) technology of an operating system kernel so as to filter the network data packet before a network protocol stack of the operating system kernel; a control interface is added, is used for controlling opening and closing of an ARP protection function and is responsible for issuing and deleting rules, and meanwhile, a time parameter T and the maximum message number Max within T time are configured; compared with the traditional ARP anti-attack technology, the method and the system for realizing the ARP anti-attack of the credential operation system without occupying the CPU resource have the beneficial effects that the ARP message is directly filtered at a network card drive inlet, so that the impact of the ARP attack message on the CPU is reduced; the operating system has an ARP anti-attack function, does not depend on a third-party application, and is safe and reliable; the self-adaptive ARP filtering technology can intelligently adjust an ARP blacklist, and when an attack source returns to normal, ARP learning can be automatically recovered.

A method for supporting virtual machine (VM) mobility between network devices connected to a network includes: selecting a first type of route for interconnecting VMs that are connected to the network devices; and adding a feature of a second type of route to the first type of route to enable the network devices to execute proxy address resolution protocol (ARP) for transmitting network traffic between the VMs without requiring each of the network devices to store a physical address of each of the VMs in respective ones of a network address table.

The invention relates to the technical field of Internet of Things, and provides an equipment identification method and device, equipment and a medium, which can start a probe to asynchronously initiate an address resolution protocol broadcast request for a target authorized network segment in a sectional manner to generate an active equipment list, and can avoid congestion, thereby accurately detecting active equipment. Performing port detection on each device in the active device list, performing multi-protocol verification on an open port according to a port-protocol adaptive matching mechanism, and performing organization unique identifier analysis on a media access control address of each device in the active device list; the problem of missing detection caused by single protocol broadcasting and port change and the problem of false alarm caused by only organizing unique identifier analysis are solved; and calculating a confidence score of each device according to the fusion features to generate an identification result of each device, so that device identification can be accurately carried out step by step by integrating multi-dimensional factors, and the false alarm rate is effectively reduced.

The invention discloses a water regimen data acquisition dual-machine redundancy method and system, and the system comprises a main machine and a standby machine which are directly connected through an independent heartbeat interface. The main machine periodically sends heartbeat messages and local network configuration information to the standby machine through a heartbeat interface; and the standby machine monitors heartbeat in real time, judges that the main machine is abnormal once not receiving the heartbeat within a preset time, automatically takes over the IP address of the main machine, actively sends an address resolution protocol message according to pre-stored network configuration information so as to quickly update a forwarding table of the network equipment, immediately switches the state of the standby machine to be the main state, and synchronizes the state to a database. According to the method, automatic sub-second fault switching is achieved, the risk of key data loss is greatly reduced, continuity and integrity of water regimen telemetering data are guaranteed, meanwhile, the operation load of a background database is remarkably reduced through a main and standby mode, and the reliability of water regimen telemetering is improved. The problems that the load of the database is too heavy and automatic seamless switching of network channel data acquisition cannot be realized are solved.

A control program executing on a computing device of a computing environment transmits control request information to an adapter module executing within the computing environment. The transmitting uses a control plane transmit queue of a set of queues. The control plane transmit queue identifies a location to store the control request information to be retrieved by the adapter module. The control program receives from the adapter module an indication of another location storing control reply information replying to the control request information. The indication is obtained from a control plane receive queue of the set of queues. The control program retrieves from the another location the control reply information and performs processing based on the control reply information.

The invention relates to a network connectivity test method and device, equipment, a storage medium and a program product. The method comprises the following steps: for each server node in the data center, determining at least one to-be-tested node pair of the data center according to an address resolution protocol (ARP) table item of the server node; the ARP table item comprises communication state information of the server node and other server nodes; determining a target node pair from the at least one to-be-tested node pair; and performing a network connectivity test on the target node pair by using a Ping Mesh technology to obtain a test result of the network connectivity of the data center. By adopting the method, the target node pair can be determined from the plurality of server nodes of the data center, so that only the target node pair can be subjected to the network connectivity test, and the processing load of a core switch can be reduced by accurately controlling the server nodes participating in the network connectivity test.

The invention discloses a PON (Passive Optical Network) equipment research management method based on an MAC (Media Access Control) address, which relates to the technical field of communication, and comprises the following steps: S100, collecting routing table information, ARP (Address Resolution Protocol) information and LLDP (Local Link Distribution Protocol) information; s200, classifying the acquired equipment information by using equipment identifiers, distinguishing equipment types, acquiring PON port names and indexes of OLT equipment and opposite-end ONU MAC addresses under the PON ports according to private MIB information of manufacturers for network equipment and OLT equipment, and mapping and storing OLT information; s300, constructing a link between the network equipment and a link between the network equipment and the OLT equipment, and constructing a link between the OLT and the ONU through an automatic link construction algorithm; s400, generating a network topological graph; and S500, displaying the network topological graph, reflecting the link state and providing an alarm function. The PON equipment research management method and system realize PON equipment research management.

One embodiment of the present invention facilitates address resolution protocol (ARP) resolution in an extended subnet. A gateway of a first segment of the extended subnet can determine that a layer-2 address corresponding to a layer-3 destination address of a packet is locally unavailable. The gateway can then determine whether a respective egress interface of an ARP request for the layer-3 destination address is associated with a layer-2 subnet extension from the first segment to a second segment of the extended subnet. The extension can provide a common layer-2 broadcast domain comprising the first and second segments with a same default gateway layer-3 address. If the egress interface is associated with the extension, the gateway can insert a layer-3 address of a first endpoint associated with the extension as a source protocol address in the ARP request. The gateway can send the modified ARP request via the egress interface.

This invention relates to the field of communication technology and discloses a method, apparatus, computer device, and storage medium for monitoring server sub-cards. The method for monitoring server sub-cards includes: after the server is powered on, selecting sub-cards supporting the System Management Bus (SMBus) from multiple sub-cards connected to the same I2C integrated circuit bus to obtain a set of sub-cards to be monitored; assigning an address to each sub-card in the set of sub-cards using the Address Resolution Protocol (ARP); and monitoring the sub-cards in the set of sub-cards based on their assigned addresses. This allows each sub-card in the set of sub-cards to have a different assigned address, thus eliminating the need for switching channels via a switch chip when monitoring the same sub-card, and enabling simultaneous monitoring of the same sub-cards, thereby improving monitoring efficiency.

An access point (AP) in an AP cluster is provided. During operation, the AP can identify a set of Internet Protocol (IP) addresses of permitted devices in a virtual local area network (VLAN) of the AP cluster from a first set of packets. The AP can also identify a set of media access control (MAC) addresses corresponding to the set of IP addresses from a second set of packets. The AP can then generate a whitelist comprising the sets of IP and MAC addresses. The whitelist can indicate addresses of packets permitted to be forwarded via the wireless interface. The AP can identify a target IP address in an Address Resolution Protocol (ARP) request. If the target IP address is absent in the whitelist, the AP can preclude the wireless interface from forwarding the ARP request to clients wirelessly coupled to the wireless interface.

The invention discloses a computing power resource distributed conduction method based on an ARP protocol, and the method comprises the steps: transmitting the application information of a computing power resource and the release information of the computing power resource through employing a reserved field in a request message of the ARP protocol; the release information of the computing power resources explains the release condition of the computing power resources in a standardized encoding mode of the reserved fields, after the router receives the release information of the computing power resources, a cost-end computing power resource release table and application information of the computing power resources are generated, and the application information of the computing power resources is generated in a standardized encoding mode of the reserved fields. The computing power resource application condition is explained, and the router generates a cost-end computing power resource application form after receiving the computing power resource application information. According to the reserved field transmission computing power resource information of the extended ARP protocol, a new protocol does not need to be introduced or a network architecture does not need to be greatly modified, implementation complexity and invasiveness to an existing network are reduced, deployment cost is low, and popularization is easy.

The invention discloses a cross-regional networking system for a 5G private network. In the system, a source terminal sends an ARP (Address Resolution Protocol) request message of a destination terminal address to a network integrated management device through a node gateway of the source terminal; the network integrated management equipment queries a destination terminal according to the ARP request, adds the MAC address of the queried destination terminal and GRE tunnel information into an ARP request message, and sends the ARP request message to a node gateway of the destination terminal; the node gateway of the destination terminal updates an MAC forwarding table according to the MAC address of the destination terminal and GRE tunnel information in the received ARP request message, and feeds back an ARP response to the source terminal through the network integrated management equipment and the node gateway of the source terminal; and the source terminal sends a data message to the destination terminal through the node gateway of the source terminal, the network integrated management equipment and the node gateway of the destination terminal based on the MAC address of the destination terminal. According to the scheme, cross-region unified networking can be kept, and the stability of networking is ensured.

The present invention discloses a dual-homed voice service recovery method and device, wherein the method includes the following steps: pre-configuring the Virtual Routing Redundancy Protocol (VRRP) deployed on the master and backup devices on a passive optical network (PON) link and planning voice services; when triggering a switchover between the master and backup devices on the PON link, dynamically adjusting the VRRP protocol priorities of the master and backup devices to dynamically switch the master and backup device states, and synchronously completing the update of the user-side voice service Address Resolution Protocol (ARP) table entries on the master and backup devices to restore voice services. This application can quickly restore unicast services when the PON link switches, while avoiding user service changes caused by the switching of gateway devices after the link switchover, making user-side service planning more convenient and saving resource consumption.

The invention provides a data center monitoring system which can be applied to the technical field of big data and artificial intelligence. The data center monitoring system comprises a user-defined monitoring item module which is used for providing a graphical configuration interface and enabling a user to add, edit or delete monitoring items in a user-defined mode; the automatic sensing module is used for scanning a target network through an address resolution protocol, judging whether new monitored equipment exists or not, responding to the detected new monitored equipment, and automatically triggering a new monitored equipment identification process; the data acquisition module is used for generating and executing an acquisition task according to the monitoring item; the intelligent operation and maintenance module is used for performing early warning by using the monitoring item prediction model and the equipment prediction model, and generating a safety setting interval of the configuration item in response to the occurrence of monitoring item early warning; and the three-dimensional machine room display module is used for generating a three-dimensional model according to the distribution of the monitored equipment. The invention further provides data center monitoring system equipment, a medium and a program product.

The present invention discloses a method, device, equipment and medium for blocking network equipment. The method comprises: determining the target physical address of the terminal to be blocked according to the address resolution protocol table and interface table of each network equipment in the enterprise network and the IP address of the terminal to be blocked; determining the number of physical addresses learned by each network equipment according to the media access control table of each network equipment, and determining the target network equipment connected to the terminal to be blocked according to the number of physical addresses learned by each network equipment; the port corresponding to the target physical address in the target network equipment is the target port; remotely log in to the target network equipment and block the target port on the target network equipment. The embodiment of the present invention realizes the rapid positioning of network resources and improves the efficiency of network operation and maintenance execution.

The application provides a network anomaly detection and defense method based on historical state comparison, and belongs to the technical field of computer data processing. In the application, a historical legal network state table and a real-time network state table are acquired, and a double-layer verification logic combining initial screening with internet protocol address indexing and accurate judgment with medium access control address indexing is executed, so that the legality of network behavior can be cross-verified in multidimensional data comparison, normal lease behavior of a dynamic host configuration protocol and network attacks such as address resolution protocol spoofing can be effectively distinguished, the false positive rate of anomaly detection is reduced, and multiple types of network anomaly detection scenes including address resolution protocol spoofing, internet protocol address conflict and multi-address violation are widened.

The embodiment of the invention discloses a communication method between upper computers of a mobile ad hoc network. The method comprises the following steps: respectively creating a node routing table for each node in the mobile ad hoc network; respectively creating an upper computer routing table for each node through an ARP (Address Resolution Protocol) process; and when the nodes in the mobile ad hoc network receive the service data of the source upper computer, determining a communication route according to the locally created node routing table and the upper computer routing table, and transmitting the service data to the target upper computer according to the determined communication route. A node routing table and an upper computer routing table are created for each node in advance, the node obtains a destination node according to the upper computer routing table after receiving upper-layer service data and queries one-hop routing information of the destination node according to the node routing table so as to perform service communication between upper computers, an ARP packet does not need to be sent frequently when routing changes, and the service communication efficiency is improved. The network throughput can be improved by updating the routing information in the node routing table in time, and occupation of more air interface resources caused by increase of the number of upper computers is avoided.

According to the present disclosure, a network protection device includes: a communication device; a storage device configured to store a white list that defines access rights between a plurality of first terminals belonging to a target network; and a control device configured to modulate an address resolution protocol (ARP) table of each of the plurality of first terminals using an ARP packet so that a first communication flow generated between the plurality of first terminals is received by the communication device, and block the first communication flow or transmit the first communication flow to a destination based on the white list when the first communication flow is received.

The invention discloses a network interconnection method and related equipment. According to the embodiment of the invention, port states of member ports in a preset link aggregation group of a server can be traversed; when detecting that the port state of the member port is an open state, synchronously sending an address resolution protocol message to each access switch connected with each member port based on each member port in the preset link aggregation group; each access switch obtains the mac address of the server according to the address resolution protocol message, and forwards the mac address of the server to a preset core switch; the core switch determines a routing path according to member ports connected with the access switch, the access switch and the mac address of the server; and the core switch forwards the data packet based on the routing path. According to the invention, the reliability and universality of network interconnection can be improved, and the cost of network interconnection is reduced.

The application relates to a test verification method and device of a solid state disk SMBUS address resolution protocol, computer equipment and a storage medium, wherein the method comprises the following steps: judging whether the UDID of a first solid state disk and a second solid state disk is repeated and whether the UDID meets the definition in the UDID; if the UDID is repeated, the solid state disk is defective and the test is interrupted; judging whether the device slave address of the first solid state disk and the second solid state disk is in conflict; if the device slave address is in conflict, a new unique address is distributed through an address distribution command; the UDID and the new device slave address of the first solid state disk and the second solid state disk are acquired respectively; judging whether the first solid state disk and the second solid state disk are endowed with the new device slave address; if the device slave address followed by the UDID is still the default device slave address, the ARP address distribution fails. The application can quickly and efficiently verify the capability of the solid state disk in SMBUS device slave address conflict and address re-distribution after the conflict.

The invention relates to a vehicle-mounted Ethernet IP address conflict solving method and system based on NAT. The system comprises a network stack module NetworkStack, a network daemon process module netd and a network configuration script module. A network stack module NetworkStack monitors a data packet transmitted by a DHCP protocol in a communication process, acquires IP address information provided by a server to the vehicle machine, and judges whether the IP address information conflicts with the IP address information in the vehicle; communicating with a kernel through a network daemon module netd; the network configuration script module uses a packet filtering firewall tool iptables to convert an IP address and a gateway address, uses an address resolution protocol arp related tool to convert an arp request address, and maps the IP address of a network layer into an MAC address of a data link layer. IP addresses are internally converted in combination with an upper-layer NetworkStack module, a middle-layer netd gateway and a plug-in script of the Android, the IP addresses in the system are changed into new configuration information, and when a message is forwarded to the outside, the configuration information is changed back to an original state, so that conflict with a network address in the system is avoided.

The present invention provides a data processing method, device and storage medium, the method comprising: the detection node sends a certain number of current detection messages to each node to be tested based on the constructed virtual address information within the current detection cycle. Receive the current response message fed back by each node to be tested in response to the current detection message; determine the communication link detection result between each node to be tested based on the current response message and the current detection message; when the communication link detection result indicates that the link of the target node is abnormal, modify the service message based on the preset address resolution protocol table by loading a preset program, and obtain the target message to send to the target node; wherein the address resolution protocol table contains the sending rule information between each node to be tested, and the address resolution protocol table is determined by the detection message within the detection cycle before the current detection cycle. This scheme can improve the efficiency and security of data communication when a link fails.

This application provides a communication method, a gateway, and a management method and apparatus. A first data center is configured to provide non-public cloud services, and a second data center is configured to provide public cloud services. A gateway configured in the second data center is connected to a first subnet of the first data center, and is connected to a second subnet of the second data center. The first subnet and the second subnet have a same private network segment. The method includes: a layer 2 gateway receives a first address resolution protocol (ARP) request packet, which is used to request a MAC address of a second device in the second subnet, sent by a first device in the first subnet, and the gateway sends the first ARP reply packet, which carries a first MAC address of the gateway, to the first device.

The invention discloses an automatic IP address allocation method based on an ARP protocol, which comprises the following steps of: on the basis of an original ARP protocol message field, defining a new operator in an original operator field; the software defined packet transport network devices start an ARP protocol, and all the software defined packet transport network devices determine a master device between the interconnection devices through regularly diffusing a protocol frame with a new operator; other equipment which is not selected as the main equipment requests the main equipment to allocate an IP address; after receiving the IP address allocation request, the master device allocates a new IP address in an idle IP address resource pool, and replies the new IP address to the non-master device; and after the non-master device receives the IP address replied by the master device, the IP address is configured to the local system. According to the method, the IP address of the same network segment is automatically allocated to the interconnected software defined packet transport network equipment through the existing protocol message communication mode, the IP address is declared to the routing protocol after the software defined packet transport network equipment is allocated to the IP address, and finally interconnection of the software defined packet transport network equipment in the whole network is realized. The method is an intelligent network opening method.

The invention relates to a host fault detection method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a network data packet connected with a gateway through a layer 2, and analyzing a source address and a destination address of the network data packet; determining the transmission direction of the network data packet according to the source address and the destination address, and updating the flow marking states corresponding to the source address and the destination address in the address resolution protocol table item according to the transmission direction; under the condition that the detection moment arrives, selecting a to-be-detected host according to each flow mark state in the address resolution protocol table item; and sending an address resolution protocol request for each to-be-detected host, determining a fault detection result of the to-be-detected host according to a response condition of the address resolution protocol request, and updating the address resolution protocol table item according to the fault detection result. By adopting the method, the utilization rate of network bandwidth resources can be improved.

The invention discloses an equipment switching method and device suitable for multiple dual homing protocol ring links, and belongs to the technical field of computer networks. The equipment switching method suitable for multiple dual homing protocol ring links comprises the following steps: generating a table clearing message carrying a target virtual local area network based on information of the target virtual local area network under the condition that a target message is received and a home node is configured to be in a target mode; and the table clearing field sends a table clearing message to the convergence layer equipment and a non-home node in the target dual-home protocol annular link, so that the convergence layer equipment and the non-home node clear a media access control table entry and an address resolution protocol table entry corresponding to the target virtual local area network. According to the device switching method and device suitable for multiple dual homing protocol ring links provided by the invention, the problem of communication quality reduction such as packet loss of the DHP ring links caused by device switching of the DHP ring links can be reduced or even avoided.