46 results about "Address Resolution Protocol" patented technology

The invention discloses a multi-modal attack identification method fusing BMama and difference to guide trans-attention, which comprises the following steps: simulating a false data injection attack, a denial of service attack, an address resolution protocol spoofing attack and a domain name system spoofing attack, collecting physical layer sensor data and network layer flow data, and preprocessing multi-modal data; bMama is constructed to perform dynamic time modeling on multi-modal data, a graph neural network is combined to adversariate a variational auto-encoder, features of a power grid system topology and a communication topology structure are fused, and robustness of potential representation is enhanced through adversarial training; the method comprises the following steps of: guiding feature complementary fusion by using modal difference through a difference guide iteration cross-attention fusion mechanism, improving the capability of distinguishing complex attacks, finally carrying out attack detection and classification on fused modals, and executing end-to-end optimization according to a weighted combination of loss of each part. The method can effectively detect and classify the multi-modal attack in the smart power grid, and enhances the safety and reliability of a complex system.

The invention relates to the technical field of Internet of Things, and provides an equipment identification method and device, equipment and a medium, which can start a probe to asynchronously initiate an address resolution protocol broadcast request for a target authorized network segment in a sectional manner to generate an active equipment list, and can avoid congestion, thereby accurately detecting active equipment. Performing port detection on each device in the active device list, performing multi-protocol verification on an open port according to a port-protocol adaptive matching mechanism, and performing organization unique identifier analysis on a media access control address of each device in the active device list; the problem of missing detection caused by single protocol broadcasting and port change and the problem of false alarm caused by only organizing unique identifier analysis are solved; and calculating a confidence score of each device according to the fusion features to generate an identification result of each device, so that device identification can be accurately carried out step by step by integrating multi-dimensional factors, and the false alarm rate is effectively reduced.

The invention discloses a water regimen data acquisition dual-machine redundancy method and system, and the system comprises a main machine and a standby machine which are directly connected through an independent heartbeat interface. The main machine periodically sends heartbeat messages and local network configuration information to the standby machine through a heartbeat interface; and the standby machine monitors heartbeat in real time, judges that the main machine is abnormal once not receiving the heartbeat within a preset time, automatically takes over the IP address of the main machine, actively sends an address resolution protocol message according to pre-stored network configuration information so as to quickly update a forwarding table of the network equipment, immediately switches the state of the standby machine to be the main state, and synchronizes the state to a database. According to the method, automatic sub-second fault switching is achieved, the risk of key data loss is greatly reduced, continuity and integrity of water regimen telemetering data are guaranteed, meanwhile, the operation load of a background database is remarkably reduced through a main and standby mode, and the reliability of water regimen telemetering is improved. The problems that the load of the database is too heavy and automatic seamless switching of network channel data acquisition cannot be realized are solved.

A control program executing on a computing device of a computing environment transmits control request information to an adapter module executing within the computing environment. The transmitting uses a control plane transmit queue of a set of queues. The control plane transmit queue identifies a location to store the control request information to be retrieved by the adapter module. The control program receives from the adapter module an indication of another location storing control reply information replying to the control request information. The indication is obtained from a control plane receive queue of the set of queues. The control program retrieves from the another location the control reply information and performs processing based on the control reply information.

This invention relates to the field of communication technology and discloses a method, apparatus, computer device, and storage medium for monitoring server sub-cards. The method for monitoring server sub-cards includes: after the server is powered on, selecting sub-cards supporting the System Management Bus (SMBus) from multiple sub-cards connected to the same I2C integrated circuit bus to obtain a set of sub-cards to be monitored; assigning an address to each sub-card in the set of sub-cards using the Address Resolution Protocol (ARP); and monitoring the sub-cards in the set of sub-cards based on their assigned addresses. This allows each sub-card in the set of sub-cards to have a different assigned address, thus eliminating the need for switching channels via a switch chip when monitoring the same sub-card, and enabling simultaneous monitoring of the same sub-cards, thereby improving monitoring efficiency.

An access point (AP) in an AP cluster is provided. During operation, the AP can identify a set of Internet Protocol (IP) addresses of permitted devices in a virtual local area network (VLAN) of the AP cluster from a first set of packets. The AP can also identify a set of media access control (MAC) addresses corresponding to the set of IP addresses from a second set of packets. The AP can then generate a whitelist comprising the sets of IP and MAC addresses. The whitelist can indicate addresses of packets permitted to be forwarded via the wireless interface. The AP can identify a target IP address in an Address Resolution Protocol (ARP) request. If the target IP address is absent in the whitelist, the AP can preclude the wireless interface from forwarding the ARP request to clients wirelessly coupled to the wireless interface.

The present invention discloses a dual-homed voice service recovery method and device, wherein the method includes the following steps: pre-configuring the Virtual Routing Redundancy Protocol (VRRP) deployed on the master and backup devices on a passive optical network (PON) link and planning voice services; when triggering a switchover between the master and backup devices on the PON link, dynamically adjusting the VRRP protocol priorities of the master and backup devices to dynamically switch the master and backup device states, and synchronously completing the update of the user-side voice service Address Resolution Protocol (ARP) table entries on the master and backup devices to restore voice services. This application can quickly restore unicast services when the PON link switches, while avoiding user service changes caused by the switching of gateway devices after the link switchover, making user-side service planning more convenient and saving resource consumption.

The invention provides a data center monitoring system which can be applied to the technical field of big data and artificial intelligence. The data center monitoring system comprises a user-defined monitoring item module which is used for providing a graphical configuration interface and enabling a user to add, edit or delete monitoring items in a user-defined mode; the automatic sensing module is used for scanning a target network through an address resolution protocol, judging whether new monitored equipment exists or not, responding to the detected new monitored equipment, and automatically triggering a new monitored equipment identification process; the data acquisition module is used for generating and executing an acquisition task according to the monitoring item; the intelligent operation and maintenance module is used for performing early warning by using the monitoring item prediction model and the equipment prediction model, and generating a safety setting interval of the configuration item in response to the occurrence of monitoring item early warning; and the three-dimensional machine room display module is used for generating a three-dimensional model according to the distribution of the monitored equipment. The invention further provides data center monitoring system equipment, a medium and a program product.

The application provides a network anomaly detection and defense method based on historical state comparison, and belongs to the technical field of computer data processing. In the application, a historical legal network state table and a real-time network state table are acquired, and a double-layer verification logic combining initial screening with internet protocol address indexing and accurate judgment with medium access control address indexing is executed, so that the legality of network behavior can be cross-verified in multidimensional data comparison, normal lease behavior of a dynamic host configuration protocol and network attacks such as address resolution protocol spoofing can be effectively distinguished, the false positive rate of anomaly detection is reduced, and multiple types of network anomaly detection scenes including address resolution protocol spoofing, internet protocol address conflict and multi-address violation are widened.

The embodiment of the invention discloses a communication method between upper computers of a mobile ad hoc network. The method comprises the following steps: respectively creating a node routing table for each node in the mobile ad hoc network; respectively creating an upper computer routing table for each node through an ARP (Address Resolution Protocol) process; and when the nodes in the mobile ad hoc network receive the service data of the source upper computer, determining a communication route according to the locally created node routing table and the upper computer routing table, and transmitting the service data to the target upper computer according to the determined communication route. A node routing table and an upper computer routing table are created for each node in advance, the node obtains a destination node according to the upper computer routing table after receiving upper-layer service data and queries one-hop routing information of the destination node according to the node routing table so as to perform service communication between upper computers, an ARP packet does not need to be sent frequently when routing changes, and the service communication efficiency is improved. The network throughput can be improved by updating the routing information in the node routing table in time, and occupation of more air interface resources caused by increase of the number of upper computers is avoided.

The application relates to a test verification method and device of a solid state disk SMBUS address resolution protocol, computer equipment and a storage medium, wherein the method comprises the following steps: judging whether the UDID of a first solid state disk and a second solid state disk is repeated and whether the UDID meets the definition in the UDID; if the UDID is repeated, the solid state disk is defective and the test is interrupted; judging whether the device slave address of the first solid state disk and the second solid state disk is in conflict; if the device slave address is in conflict, a new unique address is distributed through an address distribution command; the UDID and the new device slave address of the first solid state disk and the second solid state disk are acquired respectively; judging whether the first solid state disk and the second solid state disk are endowed with the new device slave address; if the device slave address followed by the UDID is still the default device slave address, the ARP address distribution fails. The application can quickly and efficiently verify the capability of the solid state disk in SMBUS device slave address conflict and address re-distribution after the conflict.

The invention discloses an automatic IP address allocation method based on an ARP protocol, which comprises the following steps of: on the basis of an original ARP protocol message field, defining a new operator in an original operator field; the software defined packet transport network devices start an ARP protocol, and all the software defined packet transport network devices determine a master device between the interconnection devices through regularly diffusing a protocol frame with a new operator; other equipment which is not selected as the main equipment requests the main equipment to allocate an IP address; after receiving the IP address allocation request, the master device allocates a new IP address in an idle IP address resource pool, and replies the new IP address to the non-master device; and after the non-master device receives the IP address replied by the master device, the IP address is configured to the local system. According to the method, the IP address of the same network segment is automatically allocated to the interconnected software defined packet transport network equipment through the existing protocol message communication mode, the IP address is declared to the routing protocol after the software defined packet transport network equipment is allocated to the IP address, and finally interconnection of the software defined packet transport network equipment in the whole network is realized. The method is an intelligent network opening method.

The invention relates to a host fault detection method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a network data packet connected with a gateway through a layer 2, and analyzing a source address and a destination address of the network data packet; determining the transmission direction of the network data packet according to the source address and the destination address, and updating the flow marking states corresponding to the source address and the destination address in the address resolution protocol table item according to the transmission direction; under the condition that the detection moment arrives, selecting a to-be-detected host according to each flow mark state in the address resolution protocol table item; and sending an address resolution protocol request for each to-be-detected host, determining a fault detection result of the to-be-detected host according to a response condition of the address resolution protocol request, and updating the address resolution protocol table item according to the fault detection result. By adopting the method, the utilization rate of network bandwidth resources can be improved.

The invention discloses an equipment switching method and device suitable for multiple dual homing protocol ring links, and belongs to the technical field of computer networks. The equipment switching method suitable for multiple dual homing protocol ring links comprises the following steps: generating a table clearing message carrying a target virtual local area network based on information of the target virtual local area network under the condition that a target message is received and a home node is configured to be in a target mode; and the table clearing field sends a table clearing message to the convergence layer equipment and a non-home node in the target dual-home protocol annular link, so that the convergence layer equipment and the non-home node clear a media access control table entry and an address resolution protocol table entry corresponding to the target virtual local area network. According to the device switching method and device suitable for multiple dual homing protocol ring links provided by the invention, the problem of communication quality reduction such as packet loss of the DHP ring links caused by device switching of the DHP ring links can be reduced or even avoided.

Methods and systems proxy address resolution protocol processing in a distributive local area network is described. The method for proxy address resolution protocol processing includes sending, by a first subscriber device, an address resolution protocol processing broadcast to obtain a second subscriber device address, wherein the first subscriber device and the second subscriber device are in isolated routing prefix domains within a routing prefix, receiving, by the first subscriber device from a gateway, a second subscriber device proxy address for the second subscriber device, and communicating, between the first subscriber device and the second subscriber device via the gateway, using the second subscriber device proxy address.

The invention discloses a fully active network segment acquisition method and system suitable for multiple non-direct-connection heterogeneous networks, and belongs to the technical field of computer networks, and the method comprises the steps: for each subsidiary company connected with a mother company through a non-direct-connection heterogeneous network, obtaining a router information calling tool and an equipment interface information calling tool in real time from the mother company; obtaining a service network segment table based on a router information calling tool; obtaining an address resolution protocol table based on an equipment interface information calling tool; forming a minimum subnet list based on the service network segment list; based on a preset IP configuration table and a preset maximum effective use duration, screening out a plurality of latest online network addresses from the address resolution protocol table; screening active network segments based on the minimum subnet list and the nearest online network address; and determining the sub-network information of each active network segment as active network segment information, and transmitting the active network segment information to a mother company. According to the invention, the problem of low detection accuracy of the active network segment in the prior art can be solved.

The application relates to the technical field of cloud computing, and discloses a link aggregation method, device and equipment, the method is applied to a cloud private line controller in a cloud private line disassembly and stacking architecture, the method comprises the following steps: acquiring access point information of at least two access point devices; based on the access point information, allocating aggregation information to the at least two access point devices to instruct the at least two access point devices to perform dynamic link aggregation; in the case that the aggregation is successfully established, acquiring table item information of a first access point device; the first access point device is one of the at least two access point devices; the table item information is generated after the first access point device acquires an address resolution protocol of a customer exit device; and synchronizing information is forwarded to a second access point device. The application has low coupling requirements for the access point devices.

The invention discloses a network card monitoring method and device, relates to the technical field of computers, and is used for solving the problem that a server in an auxiliary power state cannot monitor a network card. The method comprises the steps that after a baseboard management controller (BMC) in a server is started, in-place information of all slots in the server is obtained, and the in-place information is used for representing whether cards are inserted into the slots or not; acquiring a first network card identifier of the inserted card based on an address resolution protocol (ARP) address of the inserted card in the slot for indicating the inserted card in the in-place information; and monitoring the network card corresponding to the first network card identifier. According to the scheme, the network card can be monitored in the auxiliary power state of the server.

Systems, computer program products, and methods are described herein for implementing real time protocol modifications for address resolutions protocols in a network environment. The present disclosure is configured to identify an address resolution protocol (ARP) cache table comprising an internet protocol (IP) address and a media access control (MAC) address for a communication mapping(s); determine a firewall property(ies) of the ARP cache table for the communication mapping(s); compare the firewall property(ies) to at least one normal firewall property and determine whether the firewall property(ies) is anomalous compared to the normal firewall property(ies); automatically execute a smart contract, wherein the smart contract comprises an authorization protocol(s) for the ARP cache table and an execution of a homomorphic encryption for the ARP cache table; and protect the ARP cache table based on the execution of the smart contract with the authorization protocol(s) and the homomorphic encryption.

The application provides a network fault repair method and system based on multi-protocol detection, and relates to the technical field of network communication, which comprises the following steps: collecting link layer discovery protocol, address resolution protocol, routing table and bidirectional forwarding detection session state information; constructing a directed graph model comprising a plurality of nodes and links; identifying a primary path of current traffic according to the bidirectional forwarding detection session state information, and determining a fault link segment according to the primary path; generating a dynamic state identifier set according to the address resolution protocol, the routing table and the fault link segment; and generating a candidate optimized path according to the directed graph model and the dynamic state identifier set. Three key states, i.e., forwarding reachability, policy blocking and link fault, are accurately identified. The dynamic state identifier set truly reflects the actual carrying capacity of a link to service traffic, and fundamentally avoids the problem of traffic black hole after switching caused by misjudgment of routing reachability, i.e., forwarding reachability.

This disclosure provides an Address Resolution Protocol (ARP) attack detection method and system, comprising: sending probe data packets to key network nodes from a host and calculating the round-trip time; determining whether network behavior is abnormal based on the round-trip time; if so, extracting the mapping relationship; obtaining a legitimate mapping benchmark; determining whether the MAC addresses corresponding to the IP addresses are consistent; if so, continuing periodic probing; otherwise, marking cached entries as suspicious infected entries; constructing and sending ARP request data packets to the network based on the IP addresses corresponding to the suspicious infected entries; receiving the ARP request data packets and performing consistency verification; determining whether the consistency verification result contains ARP spoofing attack behavior; if so, performing overwrite repair and converting the repaired entries into static entries; otherwise, continuing periodic probing; otherwise, sending the probe data packets to the key network nodes.

The embodiment of the invention relates to the technical field of communication, and provides an MAC address acquisition method and device, equipment and a storage medium, which can be applied to a first AP. The method comprises the following steps: receiving an address resolution protocol (ARP) request frame sent by station equipment (STA), wherein the ARP request frame is used for requesting to acquire an MAC address corresponding to a target IP address included in the ARP request frame; and sending the ARP request frame to the second AP. According to the embodiment of the invention, when the STA is switched between the APs, the MAC address corresponding to the target IP address in the ARP request frame can be effectively obtained.

The invention discloses a function test method, device and equipment of a dynamic host configuration protocol and a storage medium, relates to the technical field of network testing, and discloses the function test method of the dynamic host configuration protocol, which comprises the following steps: obtaining a first port and a second port, the first port is used for verifying the dynamic host configuration protocol, and the second port is used for verifying the dynamic host configuration protocol; the second port is used as a mirror image port for analyzing the uplink message of the first port; according to the first port and the second port, respectively executing an IP allocation test, a lease term management test, an abnormal scene test and an address resolution protocol broadcast automatic test to respectively obtain an IP allocation test result, a lease term management test result, an abnormal scene test result and an address resolution protocol test result; and obtaining a target test result according to the IP allocation test result, the lease term management test result, the abnormal scene test result and the address resolution protocol test result. And comprehensive automatic testing of the dynamic host configuration protocol client in a plurality of functional links is realized.

The invention discloses an ARP (Address Resolution Protocol) table item synchronization method and an MLAP-Lite test system. The method applied to auxiliary test equipment of the MLAP-Lite test system comprises the following steps: receiving an ARP message notified by the test equipment in a VLAN (Virtual Local Area Network); the gateway address of the ARP message is an IP (Internet Protocol) address of the same VLAN (Virtual Local Area Network) interface configured by the two MLAP-Lite gateways; packaging an LLDP message according to the ARP message; and the LLDP message is sent to the two MLAP-Lite gateways through a link aggregation port in the VLAN. According to the method, the ARP table item is not stored on the auxiliary testing equipment, so that the overall configuration complexity is reduced, and the performance requirement on the auxiliary testing equipment is reduced; and the two MLAGE-Lite gateways can synchronously receive the latest ARP table item information in real time, so that the problem of traffic abnormality caused by inconsistency of table items on two sides after the ARP changes in a waiting period in the prior art is solved.

In an embodiment, a method includes receiving an address-resolution-protocol (ARP) request at a first edge device from a first host device, advertising a first remote route associated with a first flag indicating the first edge device operates in a layer-3 optimized integrated-routing-and-bridging (IRB) mode by the first edge device based on the ARP request, receiving the first remote route at a second edge device from the first edge device, responsive to detecting the first flag by the second edge device, installing the first remote route into a layer-2 routing information base (RIB) associated with the second edge device.

This application discloses an IP asset management method and apparatus, a non-volatile storage medium, and an electronic device. The method includes: obtaining the Address Resolution Protocol (ARP) table of a switch within a local area network (LAN), and generating an IP asset management table based on the target set in the ARP table; binding IP addresses to corresponding MAC addresses based on their status and attributes; determining IP addresses experiencing state transitions based on ARP packets within the LAN, and generating an IP asset state transition table based on these state transitions; displaying the IP asset state transition table, receiving the audit results of the table, and managing the IP addresses based on the audit results and transition statuses. This application solves the technical problem of low efficiency in IP asset processing caused by the lack of dynamic monitoring of IP asset state changes in related technologies for enterprise networks.

Address Resolution Protocol (ARP)-proxy update for roaming client devices may be provided. A client device may query for a list of active Internet Protocol (IP) addresses used by the client device. Next, the client device may determine that an Access Point (AP) supports a collaborative IP exchange function. Then the client device may send, in response to determining that the AP supports the collaborative IP exchange function, the list of active Internet Protocol (IP) addresses to the AP.

Systems, computer program products, and methods are described herein for implementing real time protocol modifications for address resolutions protocols in a network environment. The present disclosure is configured to identify an address resolution protocol (ARP) cache table comprising an internet protocol (IP) address and a media access control (MAC) address for a communication mapping(s); determine a firewall property(ies) of the ARP cache table for the communication mapping(s); compare the firewall property(ies) to at least one normal firewall property and determine whether the firewall property(ies) is anomalous compared to the normal firewall property(ies); automatically execute a smart contract, wherein the smart contract comprises an authorization protocol(s) for the ARP cache table and an execution of a homomorphic encryption for the ARP cache table; and protect the ARP cache table based on the execution of the smart contract with the authorization protocol(s) and the homomorphic encryption.

The invention provides a resource access method and device, electronic equipment and a storage medium, and the method comprises the steps: detecting the change of a real network address of resource equipment in real time based on a response message of an address resolution protocol (ARP) in a broadcast domain where the resource equipment is located and a physical address of the resource equipment; under the condition that the change of the real network address of the resource equipment is detected, based on the changed real network address, updating a mapping relation between the virtual network address and the real network address of the resource equipment; and performing resource access on the resource equipment based on the updated mapping relation. According to the method and device, the electronic equipment and the storage medium provided by the invention, the mapping relation can be correspondingly updated along with the change of the real network address, and resource access is performed on the resource equipment based on the updated mapping relation, so that the resource access can support the change of the real network address of the resource equipment, and the resource access efficiency is improved. Therefore, the reliability and the stability of resource access are ensured.

The present application relates to the technical field of Internet of Things, and provides a device identification method, device, apparatus and medium, which can start a probe to asynchronously initiate an address resolution protocol broadcast request for a target authorized network segment to generate a list of active devices, can avoid congestion, and thus accurately detects active devices; each device in the list of active devices is subjected to port detection, open ports are subjected to multi-protocol verification according to a port-protocol adaptive matching mechanism, and a media access control address of each device in the list of active devices is subjected to organization unique identifier resolution, solving the problem of missed detection caused by single-protocol broadcast and port changes, and the problem of false positives caused by organization unique identifier resolution alone; and a confidence score of each device is calculated according to fusion features to generate an identification result of each device, so that device identification can be performed step by step and accurately in combination with multiple factors, effectively reducing the false positive rate.