arp a well, how can there be an IP MAC is the same?

This machine is performing an ARP spoofing attack that changes the ARP cache of your NIC.

You must not be able to access the Internet now, because the MAC address of the gateway is not correct, but that of this machine.

It is recommended that you get a 360arp firewall.

It means that there is an IP that is spoofed by MAC, you need to arp -d to clear it, and then bind it to MAC

arp deceive,Cut off the IP of that 233,And then kill the virus,

If the MAC address **:A is changed to the subnet of A, then B and A are no longer on the same network segment, because there is no gateway, then ping B on A will fail, and B cannot be accessed if it is not the same network segment A.

1. Routers, and even all routers don't have this function, ARP is an address resolution protocol.

No ARP is an unjustified calendar to get MAC addresses.

List, that is to say, it is impossible to enter the data exchange and routing of the trace, so it is impossible to implement MAC hiding.

2. You can only temporarily modify the MAC address to go online, if others find it and then seal it, it is still useless; As for the MAC address modification method, there are many articles on the Internet, just search for it, and I won't list it here.

First, get the intranet of the security gateway.

(e.g. the MAC address of the Hiper gateway address is 0022aa0022aa).

Write a batch file.

and MAC address to the actual gateway IP address and MAC address used). Drag this batch software into the Windows Start Program Launcher.

Here's why:1. The virtualization software will use the virtual MAC address to map with the MAC address of the physical server, so there will be a hail in the ARP table, and one MAC address corresponds to multiple virtual MAC addresses.

2. When the customer sends a request on the server, the load balancer will select a server to process the request according to the load balancing algorithm. As a result, one shared MAC address corresponds to multiple IP addresses in the ARP table.

3. The server usually communicates with the external network on behalf of multiple clients. When the server receives a request from a client, it sends the request to the external network and returns a response to the appropriate client.

The address is the identification code of the network card, the MAC address of the network card is not the same, and the bottom layer of the LAN is accessed by the MAC address;

The network is accessed with an IP address, and when it is implemented internally, the same network segment must eventually find the MAC before it is implemented.

For mutual access, MAC address is a low-level means to achieve IP access;

3.ARP is responsible for converting IP into MAC address to achieve network access;

The MAC address is equivalent to the ID card of the network card, which is unique in the world.

The IP address has nothing to do with it, but it will work when some DHCP bindings, which is equivalent to binding your ID card and your name together to be the same as you.

ARP is a protocol to obtain your IP address, which is equivalent to a protocol where others can read your ID card.

Dual binding is a measure of IP-MAC binding on both the router and the terminal, which can have a binding effect on both sides of ARP spoofing, forging the gateway and intercepting data. This is a precautionary measure based on the principle of ARP spoofing, and it is also the most commonly used method. It is effective against the most common ARP spoofing.

But the flaw of the double tie lies in 3 points:

1. The static binding on the terminal is easily destroyed by the upgraded ARP attack, and the ARP D command of the virus can make the static binding completely invalid.

2. Binding the IP-MAC table on the router is time-consuming and laborious, and it is a tedious maintenance work. To change the NIC or IP address, you need to reconfigure the route. For mobile computers, this binding work that needs to be carried out at any time is a huge burden of network maintenance, and it is almost impossible for network administrators to complete.

3. Double binding only makes the computers and routes at both ends of the network not receive relevant ARP information, but a large amount of ARP attack data can still be sent, and it must be transmitted in the intranet, which greatly reduces the transmission efficiency of the intranet, and there will still be problems.

Therefore, although double binding used to be the basic measure of ARP prevention, because of the limited prevention capacity and too troublesome management, now its effect is becoming more and more limited.

At present, only Xinquanxiang's immune router and "patrol" immune network solution can completely solve ARP attacks, because it is restricted from the network card through its own private protocol in the NAT process of the gateway, and the terminal ARP is guarded binding, locking the real gateway, plus the functions of group prevention and group control and network-wide linkage, so as to make the intranet a safe and stable network without ARP attacks!

Most likely.

1. See if someone changes the IP of their computer to the IP of the server.

2. Some people use P2P terminators, network law enforcement officers, Jusheng network management and other software to limit the speed of others and do ARP deception.

4. Flood packet attacks are generated on the intranet, and spam packets block the entire network.

Currently, there are ...... ARP attacks, skulls, DDoS, and oversized ping packets in the intranetA series of intranet attacks can cause intranet disconnection, and even attacks like ARP are difficult to detect, and antivirus software can't solve them, and they can't be **. This is also the main reason why the intranet disconnection cannot be solved after the system is reinstalled. Like a lot of people, you have no choice but to use software to limit your speed.

At present, the only thing that can be completely solved is the immune wall technology, through which the immune network solution is deployed. Immunity network solution, you don't need to make major changes to your network, you can use the immune wall to set up a policy, do not install a driver, do not let the Internet, and intercept it when it is installed. It can intercept the virus attack sent by each computer directly from the network card, restrict the upload and ** from the network card, the size of the packet, the number of connections, and carry out unified management, and the management is more thorough, and there is only one network administrator, and the Internet access status of the entire intranet computer can also be monitored, and the abnormal situation can be accurately located and alarmed, and the symptoms and root causes can be cured.

ARP attack is to achieve ARP spoofing by forging IP addresses and MAC addresses, which can generate a large amount of ARP traffic in the network and block the network.

If a person in the LAN is infected with an ARP Trojan, the system infected with the ARP Trojan will try to intercept the communication information of other computers in the network through "ARP spoofing", and thus cause the communication failure of other computers in the network.

The poisoning phenomenon of ARP spoofing Trojan is manifested as a sudden drop in connection when using the LAN, and then returns to normal after a period of time. For example, the client status frequently turns red, users frequently disconnect from the network, IE browser frequently errors, and some commonly used software malfunctions.

If the Internet is accessed through identity authentication in the LAN, the phenomenon that the Internet can be authenticated but cannot be accessed suddenly (the gateway cannot be pinged), and the Internet can be resumed after restarting the machine or running the command arp -d in the ms-dos window.

The ARP spoofing Trojan only needs to successfully infect one computer, which may cause the entire LAN to be unable to access the Internet, and in serious cases, it may even cause the entire network to be paralyzed. In addition to causing other users in the same LAN to surf the Internet intermittently, the Trojan also steals the user's password. Such as stealing QQ passwords, stealing passwords for various online games and doing money transactions, stealing online banks to do illegal trading activities, etc., this is the usual trick of Trojans, which has caused great inconvenience and huge economic losses to users.