en6275 发表于 2012-8-2 13:27:00

[讨论]ARP攻击啦!!怎么进入交换机?

<p><font face="Verdana">如下所示,一进入我的汇聚交换机,就出现如下的提示,不断的刷屏,无法进行配置,电脑也有提示冲突,应该是arp攻击引起的,但无法进入查看交换机的arp表,交换机是h3c的5600,在上面起了各个vlan的网关,具体停止告警信息的命令式什么来着啦?求救!!!</font></p>
<p><font face="Verdana"></font>&nbsp;</p>
<p><font face="Verdana">#Aug&nbsp; 2 11:48:29:042 2012 gxzzb1 ARP/5/DUPIP:- 1 -IP address 10.148.5.83 collisi<br/>on detected, sourced by f80f-4134-7927 on GigabitEthernet1/0/14 of VLAN118 and f<br/>80f-4139-5977 on GigabitEthernet1/0/13 of VLAN118<br/>%Aug&nbsp; 2 11:48:29:043 2012 gxzzb1 ARP/5/DUPIP:- 1 -IP address 10.148.5.83 collisi<br/>on detected, sourced by f80f-4134-7927 on GigabitEthernet1/0/14 of VLAN118 and f<br/>80f-4139-5977 on GigabitEthernet1/0/13 of VLAN118<br/>#Aug&nbsp; 2 11:48:30:134 2012 gxzzb1 ARP/5/DUPIP:- 1 -IP address 10.148.3.118 collis<br/>ion detected, sourced by f80f-4134-72ee on GigabitEthernet1/0/16 of VLAN104 and<br/>f80f-4139-599c on GigabitEthernet1/0/16 of VLAN104<br/>%Aug&nbsp; 2 11:48:30:135 2012 gxzzb1 ARP/5/DUPIP:- 1 -IP address 10.148.3.118 collis<br/>ion detected, sourced by f80f-4134-72ee on GigabitEthernet1/0/16 of VLAN104 and<br/>f80f-4139-599c on GigabitEthernet1/0/16 of VLAN104<br/>#Aug&nbsp; 2 11:48:30:337 2012 gxzzb1 ARP/5/DUPIP:- 1 -IP address 10.148.3.118 collis<br/>ion detected, sourced by f80f-4134-72ee on GigabitEthernet1/0/16 of VLAN104 and<br/>0021-97c4-1616 on GigabitEthernet1/0/17 of VLAN104<br/>%Aug&nbsp; 2 11:48:30:338 2012 gxzzb1 ARP/5/DUPIP:- 1 -IP address 10.148.3.118 collis<br/>ion detected, sourced by f80f-4134-72ee on GigabitEthernet1/0/16 of VLAN104 and<br/>0021-97c4-1616 on GigabitEthernet1/0/17 of VLAN104<br/>#Aug&nbsp; 2 11:48:30:540 2012 gxzzb1 ARP/5/DUPIP:- 1 -IP address 10.148.3.118 collis<br/>ion detected, sourced by f80f-4134-72ee on GigabitEthernet1/0/16 of VLAN104 and<br/>0021-976f-8d1d on GigabitEthernet1/0/15 of VLAN104<br/>%Aug&nbsp; 2 11:48:30:541 2012 gxzzb1 ARP/5/DUPIP:- 1 -IP address 10.148.3.118 collis<br/>ion detected, sourced by f80f-4134-72ee on GigabitEthernet1/0/16 of VLAN104 and<br/>0021-976f-8d1d on GigabitEthernet1/0/15 of VLAN104<br/>#Aug&nbsp; 2 11:48:31:982 2012 gxzzb1 ARP/5/DUPIP:- 1 -IP address 10.148.3.194 collis<br/>ion detected, sourced by 0013-d32f-5e74 on GigabitEthernet1/0/18 of VLAN106 and<br/>001b-b95a-c07d on GigabitEthernet1/0/18 of VLAN106<br/>%Aug&nbsp; 2 11:48:31:983 2012 gxzzb1 ARP/5/DUPIP:- 1 -IP address 10.148.3.194 collis<br/>ion detected, sourced by 0013-d32f-5e74 on GigabitEthernet1/0/18 of VLAN106 and<br/>001b-b95a-c07d on GigabitEthernet1/0/18 of VLAN106</font></p>

en6275 发表于 2012-8-2 16:36:00

<p>怎么进呐?</p>

gundan02 发表于 2012-8-7 21:03:00

先关闭提示,在看arp

systime 发表于 2012-9-4 11:19:00

&nbsp;&nbsp; 用配置线连接CONSOLE不就行了,不过你要是没弄过的话,最好别自己弄。<br/>

jjanhao 发表于 2013-5-2 16:18:00

这个我遇到过,UNDO VLAN118都不行,你通过这个语句看以看到是13口有问题,你直接把13口的网线拔掉就Ok了,

racetop 发表于 2013-5-9 16:43:00

学习了

csl52841525 发表于 2013-11-11 11:40:57

程序不懂啊 雾里看花似的。

布线你懂吗 发表于 2014-4-23 16:31:04

1111111111

lengdw 发表于 2014-5-24 13:09:09

关闭消息:undo inf en
建议先拔掉网线再看ARP。

网立通 发表于 2014-6-8 17:34:39

我们是深圳网立通,主要生产面板AP 、吸顶AP、等室内外网络设备。精选欧洲进口ROS集控软件管理模块。欢赢咨询测试与OEM

               销售QQ:306296214       电话188 2092 5874 刘生

pangerlei 发表于 2014-7-3 10:52:41

把你的IP改成10.148.5.83,让攻击者IP冲突。他就断网了。
页: [1]
查看完整版本: [讨论]ARP攻击啦!!怎么进入交换机?