ARP代理 教程图解 (案例，动画过程、配套仿真）
<br/><p class="MsoNormal" style="text-align: center;" align="center"><span class="apple-style-span"><b><span style="font-size: 16pt; color: black;" lang="SV"><br/></span></b></span><span class="apple-style-span"><b><span style="font-size: 16pt; font-family: 宋体; color: black;"></span></b></span><span class="apple-style-span"><b><span style="font-size: 16pt; color: black;" lang="EN-US"></span></b></span></p><p class="MsoNormal"><span style="" lang="SV"> </span></p>
<p class="MsoNormal"><span style="font-family: 宋体;">这个</span><span style="" lang="EN-US">ARP</span><span style="font-family: 宋体;">代理检查用最简单的拓扑、场景来显示</span><span style="" lang="EN-US">ARP</span><span style="font-family: 宋体;">怎么能够跨路由器找到其它局网里的</span><span style="" lang="EN-US">MAC</span><span style="font-family: 宋体;">地址。案例有两个版本：仿真、图解。图解版本是从仿真截图，并加标注释，说明每一个步骤的关键。</span><span style="" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt;"><span style="" lang="EN-US"><span style="">-<span style="font: 7pt="7pt""Times New="New"Roman";">
</span></span></span><b style=""><span style="font-family: 宋体;">背景</span></b><span style="font-family: 宋体;">：</span><span style="" lang="EN-US">ARP</span><span style="font-family: 宋体;">只适用于局网，如果目的计算机位于另一个局网，两者得用路由器相连，而路由器的一个重要作用是把洪泛局限在一个局网之内，防止洪泛蔓延到其他局网。所以</span><span style="" lang="EN-US">ARP</span><span style="font-family: 宋体;">不能跨过路由器查询。这个矛盾可用</span><span style="" lang="EN-US">ARP</span><span style="font-family: 宋体;">代理解决。</span><span style="" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt;"><span style="" lang="EN-US"><span style="">-<span style="font: 7pt="7pt""Times New="New"Roman";">
</span></span></span><b style=""><span style="" lang="EN-US">ARP</span></b><b style=""><span style="font-family: 宋体;">代理原理</span></b><span style="font-family: 宋体;">：如果</span><span style="" lang="EN-US">ARP</span><span style="font-family: 宋体;">查询的对象位于不同的局网，</span><span style="" lang="EN-US">ARP</span><span style="font-family: 宋体;">的查询又不能跨过路由器在另一个局网广播，路由器就成为另一个局网的代表，回复</span><span style="" lang="EN-US">ARP Request, </span><span style="font-family: 宋体;">这就是</span><span style="" lang="EN-US">ARP</span><span style="font-family: 宋体;">代理</span><span style="" lang="EN-US"> (Proxy ARP)..</span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt;"><span style="" lang="EN-US"><span style="">-<span style="font: 7pt="7pt""Times New="New"Roman";">
</span></span></span><b style=""><span style="font-family: 宋体;">预备知识</span></b><span style="font-family: 宋体;">：</span><span style="" lang="EN-US">ARP</span><span style="font-family: 宋体;">，</span><span style="font-family: "Arial","sans-serif"; color: black;" lang="EN-US">IP</span><span style="font-family: 宋体; color: black;">地址，子网划分</span><span style="font-family: "Arial","sans-serif"; color: black;" lang="EN-US">, </span><span style="font-family: 宋体; color: black;">路由表，请见参考资料。</span><span style="" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt;"><span style="" lang="EN-US"><span style="">-<span style="font: 7pt="7pt""Times New="New"Roman";">
</span></span></span><b style=""><span style="" lang="EN-US">ARP </span></b><b style=""><span style="font-family: 宋体;">代理仿真</span></b><span style="font-family: 宋体;">：</span><span style=""> </span><span style="font-family: 宋体;">这个图解教程是根据</span><span style="" lang="EN-US"><a href="http://www.visualland.net/view.php?cid=863&protocol=ARP&title=7.%20ARP%20spoofing">Proxy
ARP<span style="font-family: 宋体;" lang="EN-US"><span lang="EN-US">仿真</span></span></a></span><span style="font-family: 宋体;">创作。仿真用动画显示代理</span><span style=""> <span lang="EN-US">ARP</span></span><span style="font-family: 宋体;">的过程，读者可以互动的检查数据包内容，观察数据包</span><span style=""> <span lang="EN-US">- ARP</span></span><span style="font-family: 宋体;">表</span><span style="" lang="EN-US"> – </span><span style="font-family: 宋体;">路由表之间的因果关系。</span><span style="" lang="EN-US"></span></p>
<p class="MsoNormal"><span style="" lang="EN-US"> </span></p>
<p class="MsoNormal"><span style="" lang="EN-US"> </span></p>
<p class="MsoNormal"><b style=""><span style="font-size: 14pt; font-family: 宋体;">拓扑</span></b><span style="" lang="EN-US"></span></p>
<p class="MsoNormal"><span style="" lang="EN-US"> </span>
</p><p class="MsoNormal" style="text-align: center;" align="center"><span class="apple-style-span"><b><span style="font-size: 16pt; color: black;" lang="SV"></span></b></span></p>
<p class="MsoNormal"><span style="" lang="EN-US"> </span></p>
<p class="MsoNormal" style="line-height: 119%;"><span style="line-height: 119%; font-family: 宋体; color: black;">代理</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">ARP</span><span style="line-height: 119%; font-family: 宋体; color: black;">的生成、应用过程可用以下步骤说明：</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt; line-height: 119%;"><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"><span style="">1.<span style="font: 7pt="7pt""Times New="New"Roman";"> </span></span></span></b><b style=""><span style="line-height: 119%; font-family: 宋体; color: black;">拓扑：路由器</span></b><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">R1 </span></b><b style=""><span style="line-height: 119%; font-family: 宋体; color: black;">连接了两个局网，每个局网有一个子网。主机</span></b><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">H1 </span></b><b style=""><span style="line-height: 119%; font-family: 宋体; color: black;">在子网</span></b><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">10.1.1</span></b><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">.0/24 , H2</span></b><b style=""><span style="line-height: 119%; font-family: 宋体; color: black;">在子网</span></b><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">10.1.2.0/24, </span></b><b style=""><span style="line-height: 119%; font-family: 宋体; color: black;">它们位于不同的子网。</span></b><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></b></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt; line-height: 119%;"><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"><span style="">2.<span style="font: 7pt="7pt""Times New="New"Roman";"> </span></span></span></b><b style=""><span style="font-family: 宋体;">在初始化时，</span></b><b style=""><span style="" lang="EN-US">H1, R1, H2 </span></b><b style=""><span style="font-family: 宋体;">的</span></b><b style=""><span style="" lang="EN-US">ARP</span></b><b style=""><span style="font-family: 宋体;">表都只有本身的</span></b><b style=""><span style="" lang="EN-US">MAC</span></b><b style=""><span style="font-family: 宋体;">地址。</span></b><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></b></p>
<p class="MsoNormal" style="margin-left: 20pt; line-height: 119%;"><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">H1 </span><span style="line-height: 119%; font-family: 宋体; color: black;">的路由表用</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">“show ip route” </span><span style="line-height: 119%; font-family: 宋体; color: black;">命令显示：</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">Gateway of last resort is not set,<span style=""> </span></span><span style="line-height: 119%; font-family: 宋体; color: black;">这是说</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">H1</span><span style="line-height: 119%; font-family: 宋体; color: black;">没有配置命令网关。</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 10pt; line-height: 119%;"><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">R1</span><span style="line-height: 119%; font-family: 宋体; color: black;">的路由表有两个条目：</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">(10.1.1.0,
E0/0), (10.1.2.0, E0/1)</span><span style="line-height: 119%; font-family: 宋体; color: black;">。作用是把目的</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">IP</span><span style="line-height: 119%; font-family: 宋体; color: black;">地址在子网</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">10.1.1.0</span><span style="line-height: 119%; font-family: 宋体; color: black;">的数据包从接口</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">E0/0</span><span style="line-height: 119%; font-family: 宋体; color: black;">转发，把目的</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">IP</span><span style="line-height: 119%; font-family: 宋体; color: black;">地址在子网</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">10.1.2.0</span><span style="line-height: 119%; font-family: 宋体; color: black;">的数据包从接口</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">E0/1</span><span style="line-height: 119%; font-family: 宋体; color: black;">转发</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US">.</span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt; line-height: 119%;"><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"><span style="">3.<span style="font: 7pt="7pt""Times New="New"Roman";"> </span></span></span></b><b style=""><span lang="EN-US">H1 ping H2. </span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">但</span><span lang="EN-US">H1</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">不知道</span><span lang="EN-US">H2</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">的</span><span lang="EN-US">MAC</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">地址，所以</span><span lang="EN-US">H1</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">发</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">送</span><span lang="EN-US"> ARP Request</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">查询</span><span lang="EN-US">.</span></b><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></b></p>
<p class="MsoNormal" style="margin-left: 20pt; line-height: 119%;"><span style="font-family: 宋体;" lang="EN-US">同</span><span style="font-family: 宋体;" lang="EN-US">时</span><span style="font-family: 宋体;" lang="EN-US">，</span><span lang="EN-US">H1</span><span style="font-family: 宋体;" lang="EN-US">的</span><span lang="EN-US">ARP</span><span style="font-family: 宋体;" lang="EN-US">表添加了一个条目</span><span lang="EN-US"> (10.1.2.2,
Incomplete)</span><span style="font-family: 宋体;" lang="EN-US">，</span><span lang="EN-US"> </span><span style="font-family: 宋体;" lang="EN-US">表示正在</span><span style="font-family: 宋体;" lang="EN-US">查问</span><span lang="EN-US">H2</span><span style="font-family: 宋体;" lang="EN-US">的</span><span lang="EN-US">MAC</span><span style="font-family: 宋体;" lang="EN-US">地址，</span><span style="font-family: 宋体;" lang="EN-US">还</span><span style="font-family: 宋体;" lang="EN-US">没有</span><span style="font-family: 宋体;" lang="EN-US">结</span><span style="font-family: 宋体;" lang="EN-US">果</span><span style="font-family: 宋体;">。</span><span style="" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 20pt; line-height: 119%;"><span style="font-family: 宋体;">运行</span><span style="" lang="EN-US">Ping</span><span style="font-family: 宋体;">后，</span><span lang="EN-US">H1</span><span style="font-family: 宋体;">在</span><span style="font-family: 宋体;" lang="EN-US">命令窗口</span><span style="font-family: 宋体;">打印信息</span><span style="font-family: 宋体;" lang="EN-US">：</span><span lang="EN-US">”H1#ping 10.1.2.2; Sending
5 …”. </span><span style="font-family: 宋体;" lang="EN-US">意思是</span><span lang="EN-US">H1</span><span style="font-family: 宋体;" lang="EN-US">要</span><span style="font-family: 宋体;" lang="EN-US">发</span><span style="font-family: 宋体;" lang="EN-US">送</span><span lang="EN-US">5</span><span style="font-family: 宋体;" lang="EN-US">个</span><span lang="EN-US">ping</span><span style="font-family: 宋体;" lang="EN-US">给</span><span lang="EN-US"> H2, </span><span style="font-family: 宋体;" lang="EN-US">一收到回</span><span style="font-family: 宋体;" lang="EN-US">复</span><span style="font-family: 宋体;" lang="EN-US">就</span><span style="font-family: 宋体;" lang="EN-US">发</span><span style="font-family: 宋体;" lang="EN-US">送下一个</span><span lang="EN-US">ping</span><span style="font-family: 宋体;" lang="EN-US">。</span><span lang="EN-US"> </span><span style="font-family: 宋体;">如果两秒</span><span style="font-family: 宋体;">还</span><span style="font-family: 宋体;">没收到回</span><span style="font-family: 宋体;">复</span><span style="font-family: 宋体;">，</span><span style="" lang="EN-US">H1</span><span style="font-family: 宋体;">就再</span><span style="font-family: 宋体;">发</span><span style="font-family: 宋体;">一个</span><span style="" lang="EN-US">ping</span><span style="font-family: 宋体;">。</span><span style="" lang="EN-US"></span></p>
<p class="MsoNormal" style="line-height: 119%;"><span style="font-family: 宋体;" lang="EN-US">【注】若要</span><span style="font-family: 宋体;" lang="EN-US">观</span><span style="font-family: 宋体;" lang="EN-US">察</span><span lang="EN-US">ARP Request</span><span style="font-family: 宋体;" lang="EN-US">数据包的</span><span style="font-family: 宋体;" lang="EN-US">细节</span><span style="font-family: 宋体;" lang="EN-US">，可运行</span><span style="font-family: 宋体;" lang="EN-US">从</span><span lang="EN-US"><a href="http://www.visualland.net/view.php?cid=863&protocol=ARP&title=7.%20ARP%20spoofing">Proxy
ARP<span style="font-family: 宋体;">仿真</span></a></span><span style="font-family: 宋体;" lang="EN-US">，</span><span lang="EN-US"> </span><span style="font-family: 宋体;" lang="EN-US">点</span><span style="font-family: 宋体;" lang="EN-US">击</span><span lang="EN-US">ARP Request.</span><span style="font-family: 宋体;" lang="EN-US">。</span><span lang="EN-US"> </span><span style="font-family: "MS Mincho";" lang="EN-US"></span></p>
<p class="MsoNormal" style="line-height: 119%;"><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"> </span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt; line-height: 119%;"><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"><span style="">4.<span style="font: 7pt="7pt""Times New="New"Roman";"> </span></span></span></b><b style=""><span lang="EN-US">R1 </span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">回</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">复</span><span lang="EN-US">ARP Reply </span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">给</span><span lang="EN-US">H1, </span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">告</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">诉</span><span lang="EN-US">“H2”</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">的</span><span lang="EN-US"> MAC</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">地址</span><span lang="EN-US"> </span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">（</span><span lang="EN-US">R1</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">是</span><span lang="EN-US">H2</span></b><b style=""><span style="font-family: 宋体;" lang="EN-US">的代理）</span></b><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></b></p>
<p class="MsoNormal" style="margin-left: 20pt; line-height: 119%;"><span lang="EN-US">R1</span><span style="font-family: 宋体;" lang="EN-US">怎</span><span style="font-family: 宋体;" lang="EN-US">么</span><span style="font-family: 宋体;" lang="EN-US">扮演</span><span lang="EN-US">ARP </span><span style="font-family: 宋体;" lang="EN-US">代理？</span><span lang="EN-US"> R1</span><span style="font-family: 宋体;" lang="EN-US">收到</span><span lang="EN-US"> ARP Request </span><span style="font-family: 宋体;" lang="EN-US">后，看到</span><span lang="EN-US">H1, H2 </span><span style="font-family: 宋体;">在不同的</span><span style="font-family: 宋体;" lang="EN-US">局网</span><span style="font-family: 宋体;">，</span><span lang="EN-US">R1</span><span style="font-family: 宋体;" lang="EN-US">就代理第二个局网，替</span><span lang="EN-US">H2</span><span style="font-family: 宋体;" lang="EN-US">发</span><span style="font-family: 宋体;" lang="EN-US">送</span><span lang="EN-US"> ARP Reply</span><span style="font-family: 宋体;">，所提供的</span><span style="" lang="EN-US">MAC</span><span style="font-family: 宋体;">地址是</span><span style="" lang="EN-US">R1</span><span style="font-family: 宋体;">自己的</span><span style="" lang="EN-US">E0/0</span><span style="font-family: 宋体;">接口</span><span style="" lang="EN-US">MAC</span><span style="font-family: 宋体;">地址。</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt; line-height: 119%;"><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"><span style="">5.<span style="font: 7pt="7pt""Times New="New"Roman";"> </span></span></span></b><b style=""><span style="line-height: 119%;" lang="EN-US">H1 </span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">收到</span></b><b style=""><span style="line-height: 119%;" lang="EN-US">ARP Reply, </span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">得到了“</span></b><b style=""><span style="line-height: 119%;" lang="EN-US">H2<span style="font-family: 宋体;">”</span><span style="font-family: 宋体;">的</span> MAC</span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">。</span></b><b style=""><span style="line-height: 119%;" lang="EN-US">H1 </span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">再</span></b><b style=""><span style="line-height: 119%;" lang="EN-US">Ping H2.</span></b><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></b></p>
<p class="MsoNormal" style="margin-left: 20pt; line-height: 119%;"><span style="line-height: 119%;" lang="EN-US">H1</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">收到了</span><span style="line-height: 119%;" lang="EN-US"> ARP Reply</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">，知道了</span><span style="line-height: 119%;" lang="EN-US">”H2”</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">的</span><span style="line-height: 119%;" lang="EN-US">MAC</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">地址：</span><span style="line-height: 119%;" lang="EN-US"> (10.1.2.2,<span style=""> </span>cc00.7c87.0000s1</span><span style="line-height: 119%;" lang="EN-US">E0/0</span><span style="line-height: 119%; font-family: 宋体;">接口的</span><span style="line-height: 119%;" lang="EN-US">MAC</span><span style="line-height: 119%; font-family: 宋体;">地址</span><span style="line-height: 119%;" lang="EN-US">)</span></p>
<p class="MsoNormal" style="margin-left: 20pt; line-height: 119%;"><span style="line-height: 119%;" lang="EN-US">H1 </span><span style="line-height: 119%; font-family: 宋体;">第二次</span><span style="line-height: 119%;" lang="EN-US">ping H2.</span></p>
<p class="MsoNormal" style="line-height: 119%;"><span style="line-height: 119%;" lang="EN-US"> </span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt; line-height: 119%;"><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"><span style="">6.<span style="font: 7pt="7pt""Times New="New"Roman";"> </span></span></span></b><b style=""><span style="line-height: 119%;" lang="EN-US">R1 </span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">转发</span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">第二个</span></b><b style=""><span style="line-height: 119%;" lang="EN-US">ping</span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">失</span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">败</span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">，</span></b><b style=""><span style="line-height: 119%;" lang="EN-US">R1 </span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">发</span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">送</span></b><b style=""><span style="line-height: 119%;" lang="EN-US">ARP Request</span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">查询H2 </span></b><b style=""><span style="line-height: 119%; font-family: 宋体;">的</span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">MAC</span></b><b style=""><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">。</span></b><b style=""><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></b></p>
<p class="MsoNormal" style="margin-left: 20pt; line-height: 119%;"><span style="line-height: 119%;" lang="EN-US">R1</span><span style="line-height: 119%; font-family: 宋体;">收到</span><span style="line-height: 119%;" lang="EN-US"> ping, </span><span style="line-height: 119%; font-family: 宋体;">准</span><span style="line-height: 119%; font-family: 宋体;">备</span><span style="line-height: 119%; font-family: 宋体;">把</span><span style="line-height: 119%;" lang="EN-US">ping </span><span style="line-height: 119%; font-family: 宋体;">从</span><span style="line-height: 119%;"> <span lang="EN-US">E0/1</span></span><span style="line-height: 119%; font-family: 宋体;">转发</span><span style="line-height: 119%; font-family: 宋体;">。</span><span style="line-height: 119%; font-family: 宋体;">转发</span><span style="line-height: 119%; font-family: 宋体;">前，</span><span style="line-height: 119%;" lang="EN-US">R1</span><span style="line-height: 119%; font-family: 宋体;">得把</span><span style="line-height: 119%;" lang="EN-US">:Link</span><span style="line-height: 119%; font-family: 宋体;">报头</span><span style="line-height: 119%; font-family: 宋体;">的目的</span><span style="line-height: 119%;" lang="EN-US">MAC</span><span style="line-height: 119%; font-family: 宋体;">地址设为</span><span style="line-height: 119%;" lang="EN-US">H2</span><span style="line-height: 119%; font-family: 宋体;">的</span><span style="line-height: 119%;" lang="EN-US">MAC</span><span style="line-height: 119%; font-family: 宋体;">地址，但</span><span style="line-height: 119%;" lang="EN-US">ARP</span><span style="line-height: 119%; font-family: 宋体;">表里没有</span><span style="line-height: 119%;" lang="EN-US">H2</span><span style="line-height: 119%; font-family: 宋体;">的</span><span style="line-height: 119%;" lang="EN-US">MAC</span><span style="line-height: 119%; font-family: 宋体;">地址，</span><span style="line-height: 119%;" lang="EN-US">R1</span><span style="line-height: 119%; font-family: 宋体;">只好把</span><span style="line-height: 119%;" lang="EN-US">Ping</span><span style="line-height: 119%; font-family: 宋体;">丢</span><span style="line-height: 119%; font-family: 宋体;">弃</span><span style="line-height: 119%; font-family: "MS Mincho";" lang="EN-US">,</span><span style="line-height: 119%;" lang="EN-US"> </span><span style="line-height: 119%; font-family: 宋体;">发</span><span style="line-height: 119%; font-family: 宋体;">送</span><span style="line-height: 119%;" lang="EN-US">ARP Request </span><span style="line-height: 119%; font-family: 宋体;">查询</span><span style="line-height: 119%;" lang="EN-US">H2 </span><span style="line-height: 119%; font-family: 宋体;">的</span><span style="line-height: 119%;" lang="EN-US">MAC</span><span style="line-height: 119%; font-family: 宋体;">地址。</span><span style="line-height: 119%;" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt; line-height: 119%;"><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"><span style="">7.<span style="font: 7pt="7pt""Times New="New"Roman";">
</span></span></span><span style="line-height: 119%;" lang="EN-US">H2 </span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">收到</span><span style="line-height: 119%;" lang="EN-US">ARP Request, </span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">回</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">复</span><span style="line-height: 119%;" lang="EN-US">ARP Reply</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">。</span><span style="line-height: 119%;" lang="EN-US">R1 </span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">收到</span><span style="line-height: 119%;" lang="EN-US">ARP Reply, </span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">更新</span><span style="line-height: 119%;" lang="EN-US">ARP</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">表</span><span style="line-height: 119%;" lang="EN-US">.</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt; line-height: 119%;"><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"><span style="">8.<span style="font: 7pt="7pt""Times New="New"Roman";">
</span></span></span><span style="line-height: 119%;" lang="EN-US">H1</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">发</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">送第三个</span><span style="line-height: 119%;" lang="EN-US">ping </span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">，抵达</span><span style="line-height: 119%;" lang="EN-US"> H2</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">。</span><span style="line-height: 119%;" lang="EN-US">H2</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">要回</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">复</span><span style="line-height: 119%;" lang="EN-US">Echo. </span><span style="line-height: 119%; font-family: 宋体;">但不知道</span><span style="line-height: 119%;" lang="EN-US">H1</span><span style="line-height: 119%; font-family: 宋体;">的</span><span style="line-height: 119%;" lang="EN-US">MAC</span><span style="line-height: 119%; font-family: 宋体;">地址而</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">失</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">败</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">，</span><span style="line-height: 119%; font-family: 宋体;">就</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">发</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">送</span><span style="line-height: 119%;" lang="EN-US"> ARP Request</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">查询</span><span style="line-height: 119%;" lang="EN-US">H1</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">的</span><span style="line-height: 119%;" lang="EN-US">MAC</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">地址</span><span style="line-height: 119%;" lang="EN-US">.</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 18pt; text-indent: -18pt; line-height: 119%;"><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"><span style="">9.<span style="font: 7pt="7pt""Times New="New"Roman";">
</span></span></span><span style="line-height: 119%;" lang="EN-US">R1 (</span><span style="line-height: 119%; font-family: 宋体;" lang="EN-US">代理</span><span style="line-height: 119%;" lang="EN-US">ARP) </span><span style="line-height: 119%; font-family: 宋体;">收到了</span><span style="line-height: 119%;" lang="EN-US">H2 </span><span style="line-height: 119%; font-family: 宋体;">的</span><span style="line-height: 119%;" lang="EN-US">ARP Request, </span><span style="line-height: 119%; font-family: 宋体;">代理</span><span style="line-height: 119%;" lang="EN-US">H1,
</span><span style="line-height: 119%; font-family: 宋体;">回复</span><span style="line-height: 119%;" lang="EN-US">ARP Reply, </span><span style="line-height: 119%; font-family: 宋体;">告知</span><span style="line-height: 119%;" lang="EN-US">“H1” </span><span style="line-height: 119%; font-family: 宋体;">的</span><span style="line-height: 119%;" lang="EN-US">MAC</span><span style="line-height: 119%; font-family: 宋体;">地址。</span><span style="line-height: 119%;" lang="EN-US">H2</span><span style="line-height: 119%; font-family: 宋体;">收到后，把</span><span style="line-height: 119%;" lang="EN-US">”H1”</span><span style="line-height: 119%; font-family: 宋体;">的</span><span style="line-height: 119%;" lang="EN-US">MAC</span><span style="line-height: 119%; font-family: 宋体;">地址</span><span style="line-height: 119%;"> </span><span style="line-height: 119%; font-family: 宋体;">添加到</span><span style="line-height: 119%;" lang="EN-US">ARP</span><span style="line-height: 119%; font-family: 宋体;">表。</span><span style="line-height: 119%; font-family: "Arial","sans-serif"; color: black;" lang="EN-US"></span></p>
<p class="normal" style="margin: 0cm="0cm"0cm="0cm"0.0001pt 18pt; text-indent: -18pt;"><span style="font-size: 10pt;" lang="EN-US"><span style="">10.<span style="font: 7pt="7pt""Times New="New"Roman";"> </span></span></span><span style="font-size: 10pt;" lang="EN-US">H1</span><span style="font-size: 10pt; font-family: "MS Mincho";">第四次</span><span style="font-size: 10pt;"> <span lang="EN-US">ping
H2</span></span><span style="font-size: 10pt; font-family: "MS Mincho";">，</span><span style="font-size: 10pt;" lang="EN-US">H2</span><span style="font-size: 10pt; font-family: "MS Mincho";">收到后回</span><span style="font-size: 10pt; font-family: 宋体;">复</span><span style="font-size: 10pt;" lang="EN-US">Echo.
H1 </span><span style="font-size: 10pt; font-family: 宋体;">收到</span><span style="font-size: 10pt;" lang="EN-US">Echo</span><span style="font-size: 10pt; font-family: 宋体;">，这次</span><span style="font-size: 10pt;" lang="EN-US">Ping</span><span style="font-size: 10pt; font-family: 宋体;">成功了。</span><span style="font-size: 10pt;" lang="EN-US">.</span><span style="font-size: 10pt;" lang="EN-US">H1 </span><span style="font-size: 10pt; font-family: 宋体;">的命令窗口可见到</span><span style="font-size: 10pt;" lang="EN-US"> “…!” </span><span style="font-size: 10pt; font-family: 宋体;">意思是前三个</span><span style="font-size: 10pt;" lang="EN-US">ping</span><span style="font-size: 10pt; font-family: 宋体;">失败，第四个才成功。</span><span style="font-size: 10pt;" lang="EN-US"></span></p>
<p class="normal" style="margin: 0cm="0cm"0cm="0cm"0.0001pt;"><span style="" lang="EN-US"> </span></p>
<p class="normal" style="margin: 0cm="0cm"0cm="0cm"0.0001pt;"><span style="" lang="EN-US"> </span></p>
<p class="normal" style="margin: 0cm="0cm"0cm="0cm"0.0001pt;"><span style="" lang="EN-US"> </span></p>
<p class="normal" style="margin: 0cm="0cm"0cm="0cm"0.0001pt;"><span style="font-family: 宋体;">本场景动画过程请见</span><span lang="EN-US"><a href="http://www.visualland.net/view.php?cid=863&protocol=ARP&title=7.%20ARP%20spoofing">Proxy
ARP<span style="font-family: "MS Mincho";" lang="EN-US"><span lang="EN-US">仿真</span></span></a></span><span style="" lang="EN-US"> </span></p>
<p class="normal" style="margin: 0cm="0cm"0cm="0cm"0.0001pt;"><span style="" lang="EN-US"> </span></p>
<p class="normal" style="margin: 0cm="0cm"0cm="0cm"0.0001pt;"><span style="" lang="EN-US"> </span></p>
<p class="normal" style="margin: 0cm="0cm"0cm="0cm"0.0001pt;"><span style="" lang="EN-US"> </span></p>
<p class="normal" style="margin: 0cm="0cm"0cm="0cm"0.0001pt;"><span style="" lang="EN-US"> </span></p>
<p class="MsoNormal"><span style="font-family: 宋体;">参考资料：</span><span style="" lang="EN-US"></span></p>
<p class="MsoNormal"><span style="" lang="EN-US"> ARP </span></p>
<p class="MsoNormal" style="margin-left: 20pt;"><span style="" lang="EN-US">Visualland <a href="http://www.visualland.net/view.php?cid=863&protocol=ARP&title=7.%20ARP%20spoofing">Proxy
ARP<span style="font-family: 宋体;" lang="EN-US"><span lang="EN-US">仿真</span></span></a></span><span style="font-family: 宋体;">，</span><span style=""> <span style=""> </span><span lang="EN-US"><a href="http://www.visualland.net/protocol.overview.php?p=ARP&class=0&protocol=&title=0.ARP%20Overview">ARP<span style="font-family: 宋体;" lang="EN-US"><span lang="EN-US">仿真目录</span></span> ( Overview)
</a></span></span></p>
<p class="MsoNormal" style="margin-left: 20pt;"><span style="font-family: 宋体;">谢希仁</span><span style=""> </span><span style="font-family: 宋体;">计算机网络第五版</span><span style="" lang="EN-US"> 4.2.4
b</span><span style="font-family: 宋体;">地址解析协议</span><span style="" lang="EN-US">ARP</span></p>
<p class="MsoNormal" style="margin-left: 20pt;"><span style="" lang="EN-US">RFC 826 <a href="http://www.faqs.org/rfcs/rfc826.html">http://www.faqs.org/rfcs/rfc826.html</a>
</span></p>
<p class="MsoNormal"><span style="" lang="EN-US"> <span style=""> </span>MAC address</span></p>
<p class="MsoNormal" style="text-indent: 20pt;"><span style="" lang="EN-US"><span style=""> </span></span><span style="font-family: 宋体;">谢希仁</span><span style=""> </span><span style="font-family: 宋体;">计算机网络第五版</span><span style="" lang="EN-US"> 3.4.3
MAC</span><span style="font-family: 宋体;">层</span><span style="" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 20pt;"><span style="" lang="EN-US">Wikipedia MAC address <a href="http://en.wikipedia.org/wiki/MAC_address">http://en.wikipedia.org/wiki/MAC_address</a>
</span></p>
<p class="MsoNormal"><span style="" lang="EN-US"><span style=""> </span> </span><span style="font-family: 宋体;">路由器怎么转发数据包？</span><span style="" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 20pt;"><span style="" lang="EN-US">Visualland </span><span style="font-family: 宋体;">仿真：</span><span style="" lang="EN-US">IP Address > <a href="http://www.visualland.net/view.php?cid=973&protocol=IPAddress&title=2.%20How%20Internet%20forwards%20packets">2.
How Internet forwards packers?</a> <span style=""> </span></span></p>
<p class="MsoNormal" style="margin-left: 90pt;"><span style="" lang="EN-US">IP Address ><a href="http://www.visualland.net/view.php?cid=970&protocol=IPAddress&title=4.%20Classful%20IP%20Address">
4. Classful IP address<span style=""> </span></a><span style=""> </span><span style=""> </span></span></p>
<p class="MsoNormal" style="margin-left: 90pt;"><span style="" lang="EN-US">IP Address > <a href="http://www.visualland.net/view.php?cid=974&protocol=IPAddress&title=5.%20Subnetting%20-%20Classless%20IP">5.<span style=""> </span>Subnetting<span style="">
</span></a><span style=""> </span><span style=""> </span></span></p>
<p class="MsoNormal" style="margin-left: 20pt;"><span style="font-family: 宋体;">谢希仁</span><span style=""> </span><span style="font-family: 宋体;">计算机网络第五版</span><span style="" lang="EN-US"> 4.3 <span style=""> </span></span><span style="font-family: 宋体;">划分子网</span><span style="" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-left: 20pt;"><span style="" lang="EN-US">Wikipedia: <span style=""> </span>IP address . <a href="http://en.wikipedia.org/wiki/Ip_address">http://en.wikipedia.org/wiki/Ip_address</a>
<span style=""> </span></span></p>
<p class="MsoNormal" style="margin-left: 20pt;"><span style="" lang="EN-US"> </span></p>
<p class="MsoNormal" style="margin-left: 20pt;"><span style="" lang="EN-US"> </span></p>
<p>学习了 THANKS</p>
页:
[1]