What to do if your school is attacked by ARP

This is a tricky question.

My usual practice is to pull out the network cable, one by one, of course, this is the most benzene method, until a certain network cable is pulled, the network is restored, that is generally the machine has a problem, to check it for viruses OK.

I don't know what you mean by the school network, whether it's a classroom or a dormitory, it depends on the actual environment.

Of course, there are also skills when unplugging, such as pulling out the bottom-level switches one by one from the main switch, locking the faulty switch, and then further determining the machine, there is no other good way for the time being.

I'll give you a precautionary measure.

Today's 360 Security Guard has its own ARP virus firewall, which installs 360 Security Guard on every machine, and if it can be upgraded on time, it will definitely receive good results.

1) Put the and decompression in the archive under C:.

2) In Windows Start-Run-Open, enter cmd (Windows98 enter "Command"), enter C: btscan -r in the DOS window that appears, you need to enter it according to the user's actual network segment), and press Enter.

3) By querying the IP--MAC correspondence table, find out that the IP address of the virus host "000d870d585f" is ".

With the above method, we can quickly find the source of the virus and confirm its MAC - machine name and IP address.

I don't know what network equipment your school uses, if it is a switch that can be managed, bind the client MAC address to the switch port, and set the violation of the rules to off or directly down, it's fine. In fact, if you look at the attack principle of ARP, you can understand it.

You go to the next ARP firewall I also have a local area network on campus, and I am often attacked, and the ARP firewall feels good to use, and it's free.

It's not a matter of interception;

To do double binding on both the router and the client, this is currently the best way to solve ARP.

Today's firewalls all have this function, otherwise, you install 360 Security Guard, which also comes with ARP firewall.

Set up the router again and you're all set.