ATE523023T1 - Verfahren, kommunikationssystem und vorrichtung für arp paketverarbeitung - Google Patents
Verfahren, kommunikationssystem und vorrichtung für arp paketverarbeitungInfo
- Publication number
- ATE523023T1 ATE523023T1 AT08715268T AT08715268T ATE523023T1 AT E523023 T1 ATE523023 T1 AT E523023T1 AT 08715268 T AT08715268 T AT 08715268T AT 08715268 T AT08715268 T AT 08715268T AT E523023 T1 ATE523023 T1 AT E523023T1
- Authority
- AT
- Austria
- Prior art keywords
- arp
- packet
- response
- packet processing
- found
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/09—Mapping addresses
- H04L61/10—Mapping addresses of different types
- H04L61/103—Mapping addresses of different types across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/74—Address processing for routing
- H04L45/745—Address table lookup; Address filtering
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Communication Control (AREA)
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2007101299947A CN101094236B (zh) | 2007-07-20 | 2007-07-20 | 地址解析协议报文处理方法及通讯系统及转发平面处理器 |
| PCT/CN2008/070532 WO2009012663A1 (en) | 2007-07-20 | 2008-03-19 | Method, communication system and device for arp packet processing |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| ATE523023T1 true ATE523023T1 (de) | 2011-09-15 |
Family
ID=38992262
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| AT08715268T ATE523023T1 (de) | 2007-07-20 | 2008-03-19 | Verfahren, kommunikationssystem und vorrichtung für arp paketverarbeitung |
Country Status (7)
| Country | Link |
|---|---|
| US (2) | US8542684B2 (de) |
| EP (1) | EP2139187B1 (de) |
| CN (1) | CN101094236B (de) |
| AT (1) | ATE523023T1 (de) |
| ES (1) | ES2371127T3 (de) |
| PT (1) | PT2139187E (de) |
| WO (1) | WO2009012663A1 (de) |
Families Citing this family (32)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101094236B (zh) | 2007-07-20 | 2011-08-10 | 华为技术有限公司 | 地址解析协议报文处理方法及通讯系统及转发平面处理器 |
| CN101547187B (zh) * | 2008-03-28 | 2012-01-11 | 中兴通讯股份有限公司 | 宽带接入设备的网络攻击防护方法 |
| CN101998531B (zh) | 2009-08-11 | 2013-04-24 | 华为技术有限公司 | 策略和计费控制规则授权方法、装置及系统 |
| CN101997768B (zh) * | 2009-08-21 | 2012-10-17 | 华为技术有限公司 | 一种上送地址解析协议报文的方法和装置 |
| CN102195862A (zh) * | 2010-03-11 | 2011-09-21 | 正文科技股份有限公司 | 路由装置及相关的封包处理电路 |
| US8879554B2 (en) * | 2010-05-07 | 2014-11-04 | Cisco Technology, Inc. | Preventing MAC spoofs in a distributed virtual switch |
| CN102255984B (zh) * | 2011-08-08 | 2015-06-03 | 华为技术有限公司 | 一种arp请求报文验证方法及装置 |
| CN103036794A (zh) * | 2011-10-10 | 2013-04-10 | 华为技术有限公司 | 一种报文的学习方法、装置和系统 |
| KR101270041B1 (ko) * | 2011-10-28 | 2013-05-31 | 삼성에스디에스 주식회사 | Arp 스푸핑 공격 탐지 시스템 및 방법 |
| US9455948B2 (en) * | 2012-06-29 | 2016-09-27 | Cisco Technology, Inc. | Reducing proliferation of network-to-link-layer address resolution messages |
| CN102843362B (zh) * | 2012-08-08 | 2016-05-04 | 唐稳杰 | 一种使用tcam进行arp防御的方法 |
| CN103024851A (zh) * | 2012-11-23 | 2013-04-03 | 福建星网锐捷网络有限公司 | 基于无线网络的报文传输方法、装置及网络设备 |
| CN103152203B (zh) * | 2013-03-18 | 2015-10-14 | 成都广达电子股份有限公司 | 一种eoc局端mac地址限制学习的方法 |
| CN103347031B (zh) * | 2013-07-26 | 2016-03-16 | 迈普通信技术股份有限公司 | 一种防范arp报文攻击的方法及设备 |
| RU2652440C2 (ru) * | 2013-12-31 | 2018-04-26 | Хуавей Текнолоджиз Ко., Лтд. | Способ передачи пакетов, устройство и система связи |
| EP3092751A4 (de) | 2014-01-06 | 2017-10-18 | Samsung Electronics Co., Ltd. | Verfahren und vorrichtung zur vermittlung von paketübertragungen und zur aktualisierung der netzwerkadresseninformation in einem kommunikationssystem |
| US9716687B2 (en) * | 2014-06-19 | 2017-07-25 | Cisco Technology, Inc. | Distributed gateways for overlay networks |
| US9876712B2 (en) * | 2014-09-05 | 2018-01-23 | Kt Corporation | Method and device for processing address resolution protocol in software-defined networking environment |
| CN105635067B (zh) * | 2014-11-04 | 2019-11-15 | 华为技术有限公司 | 报文发送方法及装置 |
| CN104601460B (zh) * | 2015-02-16 | 2018-12-25 | 新华三技术有限公司 | 一种报文转发方法及装置 |
| CN106470127B (zh) * | 2015-08-18 | 2020-12-29 | 中兴通讯股份有限公司 | 一种网络异常流量的检测方法及系统 |
| CN105939332B (zh) * | 2016-03-03 | 2019-09-17 | 杭州迪普科技股份有限公司 | 防御arp攻击报文的方法及装置 |
| CN106130985B (zh) * | 2016-06-24 | 2019-09-06 | 新华三技术有限公司 | 一种报文处理方法及装置 |
| CN106982234A (zh) * | 2017-05-26 | 2017-07-25 | 杭州迪普科技股份有限公司 | 一种arp攻击防御方法及装置 |
| CN107294989B (zh) * | 2017-07-04 | 2020-02-11 | 杭州迪普科技股份有限公司 | 一种防arp网关欺骗的方法及装置 |
| CN108234522B (zh) * | 2018-03-01 | 2021-01-22 | 深圳市共进电子股份有限公司 | 防止地址解析协议arp攻击方法、装置、计算机设备和存储介质 |
| US10616175B2 (en) | 2018-05-01 | 2020-04-07 | Hewlett Packard Enterprise Development Lp | Forwarding information to forward data to proxy devices |
| CN109274638A (zh) * | 2018-05-22 | 2019-01-25 | 四川斐讯信息技术有限公司 | 一种攻击源接入自动识别处理的方法和路由器 |
| US11050650B1 (en) * | 2019-05-23 | 2021-06-29 | Juniper Networks, Inc. | Preventing traffic outages during address resolution protocol (ARP) storms |
| CN113872949B (zh) * | 2021-09-18 | 2023-08-22 | 山东云海国创云计算装备产业创新中心有限公司 | 一种地址解析协议的应答方法及相关装置 |
| CN114051013B (zh) * | 2021-10-26 | 2023-11-24 | 联想(北京)有限公司 | 一种通信数据传输方法及装置 |
| CN114221928A (zh) * | 2021-11-05 | 2022-03-22 | 济南浪潮数据技术有限公司 | 一种管理网ip冲突的防御方法、系统、装置及存储介质 |
Family Cites Families (25)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US5708654A (en) * | 1996-11-27 | 1998-01-13 | Arndt; Manfred R. | Method for detecting proxy ARP replies from devices in a local area network |
| US6771649B1 (en) * | 1999-12-06 | 2004-08-03 | At&T Corp. | Middle approach to asynchronous and backward-compatible detection and prevention of ARP cache poisoning |
| US8001269B1 (en) * | 2002-06-18 | 2011-08-16 | Cisco Technology, Inc. | Network address translation with IP redundancy |
| CN1233135C (zh) * | 2002-06-22 | 2005-12-21 | 华为技术有限公司 | 一种动态地址分配中防止ip地址欺骗的方法 |
| CN1133350C (zh) | 2002-08-15 | 2003-12-31 | 西安西电捷通无线网络通信有限公司 | 使用主动arp实现移动终端跨ip网际漫游的方法 |
| FR2844941B1 (fr) * | 2002-09-24 | 2005-02-18 | At & T Corp | Demande d'acces securise aux ressources d'un reseau intranet |
| US7356032B1 (en) * | 2002-11-01 | 2008-04-08 | Bbn Technologies Corp. | System and method for reducing broadcast traffic wireless access-point networks |
| CN1173531C (zh) | 2003-01-17 | 2004-10-27 | 清华大学 | 同时支持路由查找、ip包分类、arp查找的方法及查找系统 |
| US7490351B1 (en) * | 2003-03-12 | 2009-02-10 | Occam Networks | Controlling ARP traffic to enhance network security and scalability in TCP/IP networks |
| CN100353717C (zh) * | 2003-03-28 | 2007-12-05 | 华为技术有限公司 | 一种针对互联网协议的安全访问控制方法 |
| CN100379205C (zh) | 2003-08-11 | 2008-04-02 | 华为技术有限公司 | 交换机加速arp表项老化的方法 |
| US7237267B2 (en) * | 2003-10-16 | 2007-06-26 | Cisco Technology, Inc. | Policy-based network security management |
| WO2005114909A1 (en) | 2004-05-21 | 2005-12-01 | Computer Associates Think, Inc. | Systems and methods for discovering machines |
| US7471684B2 (en) | 2004-10-21 | 2008-12-30 | International Machines Corporation | Preventing asynchronous ARP cache poisoning of multiple hosts |
| US7551559B1 (en) * | 2004-10-22 | 2009-06-23 | Cisco Technology, Inc. | System and method for performing security actions for inter-layer binding protocol traffic |
| CN100490424C (zh) | 2005-03-01 | 2009-05-20 | 杭州华三通信技术有限公司 | 一种分布式arp实现方法 |
| US20060209818A1 (en) * | 2005-03-18 | 2006-09-21 | Purser Jimmy R | Methods and devices for preventing ARP cache poisoning |
| US7436783B2 (en) * | 2005-04-04 | 2008-10-14 | Apple Inc. | Method and apparatus for detecting a router that improperly responds to ARP requests |
| CN100563245C (zh) * | 2005-04-27 | 2009-11-25 | 华为技术有限公司 | 一种针对arp泛滥攻击的防范方法 |
| CN100505757C (zh) * | 2005-08-09 | 2009-06-24 | 华为技术有限公司 | Arp缓存表防攻击方法 |
| JP4640128B2 (ja) * | 2005-11-16 | 2011-03-02 | 日立電線株式会社 | 応答通信機器及びarp応答通信機器 |
| CN100454901C (zh) | 2006-02-17 | 2009-01-21 | 华为技术有限公司 | 一种arp报文处理方法 |
| CN1946041B (zh) | 2006-06-20 | 2010-08-18 | 杭州华三通信技术有限公司 | 基于arp侦听的vlan聚合方法、汇聚交换机及系统 |
| CN100553259C (zh) | 2006-09-15 | 2009-10-21 | 杭州华三通信技术有限公司 | 一种arp报文处理方法及装置 |
| CN101094236B (zh) * | 2007-07-20 | 2011-08-10 | 华为技术有限公司 | 地址解析协议报文处理方法及通讯系统及转发平面处理器 |
-
2007
- 2007-07-20 CN CN2007101299947A patent/CN101094236B/zh not_active Expired - Fee Related
-
2008
- 2008-03-19 AT AT08715268T patent/ATE523023T1/de not_active IP Right Cessation
- 2008-03-19 EP EP08715268A patent/EP2139187B1/de not_active Not-in-force
- 2008-03-19 WO PCT/CN2008/070532 patent/WO2009012663A1/zh not_active Ceased
- 2008-03-19 PT PT08715268T patent/PT2139187E/pt unknown
- 2008-03-19 ES ES08715268T patent/ES2371127T3/es active Active
-
2009
- 2009-11-06 US US12/614,206 patent/US8542684B2/en not_active Expired - Fee Related
-
2013
- 2013-08-19 US US13/987,651 patent/US9148374B2/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| EP2139187A1 (de) | 2009-12-30 |
| CN101094236B (zh) | 2011-08-10 |
| US8542684B2 (en) | 2013-09-24 |
| US9148374B2 (en) | 2015-09-29 |
| PT2139187E (pt) | 2011-11-10 |
| CN101094236A (zh) | 2007-12-26 |
| EP2139187B1 (de) | 2011-08-31 |
| ES2371127T3 (es) | 2011-12-27 |
| US20100054253A1 (en) | 2010-03-04 |
| WO2009012663A1 (en) | 2009-01-29 |
| EP2139187A4 (de) | 2010-04-14 |
| US20130336326A1 (en) | 2013-12-19 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| ATE523023T1 (de) | Verfahren, kommunikationssystem und vorrichtung für arp paketverarbeitung | |
| ATE480084T1 (de) | Verfahren, vorrichtung und system zur nachrichtenübermittlung | |
| ATE533266T1 (de) | Verfahren, vorrichtung und system zur unterstützung eines transparenten proxys in einem gateway mit drahtlosem zugang | |
| ATE514269T1 (de) | Firewall-verfahren und vorrichtung für industrielle systeme | |
| ATE538573T1 (de) | Verfahren, systeme und einrichtungen zum herstellen einer registrationslosen datenkommunikationsverbindung zwischen elektronischen geräten | |
| EP2117190A4 (de) | Verfahren, system und vorrichtung zur weiterleitung von netzwerkadressen-übersetzungen | |
| DE602008004845D1 (de) | Verfahren, System und Einrichtung zum Entfernen der Medienzugangskontrolladresse | |
| MY153329A (en) | Dynamic home network assignment | |
| DE602007001075D1 (de) | Verfahren, Vorrichtung und System zur Mobilitätsverwaltung und leistungsfähigen Informationsauffindung in einem Kommunikationsnetz | |
| ATE490624T1 (de) | Verfahren und system zur zugriffspriorität für 802.11 endpunkten mittels dcf protokoll | |
| DE602004021043D1 (de) | Verfahren und system zur erkennung von attacken in drahtlosen datenkommunikationsnetzen | |
| ATE480064T1 (de) | Verfahren und vorrichtung zum aufwecken eines schlafenden systems | |
| ATE513404T1 (de) | Vorrichtung, system und verfahren zur analyse von segmenten in einer übertragungssteuerungsprotokoll (tcp)-sitzung | |
| ATE479244T1 (de) | Verfahren und vorrichtung zur implementierung von multicast-routing | |
| EP1980950A4 (de) | Proxy-endgerät, server-einrichtung, proxy-endgeräte-kommunikationspfad-einrichtverfahren und servereinrichtungs-kommunikationspfad-einrichtungsverfahren | |
| ATE540519T1 (de) | Verfahren und vorrichtung zur gemeinsamen nutzung von verbindungen von gemeinsamem interesse zwischen kommunikationsgeräten | |
| WO2012080414A3 (en) | Data processing for managing the quality of service in a machine-to-machine network | |
| ATE532364T1 (de) | Verfahren und vorrichtung zur sendung von datenpaketen an und von mobilen knoten | |
| GB201304551D0 (en) | Apparatus and method for controlled ethernet switching | |
| ATE433249T1 (de) | Verfahren und vorrichtung zur untersuchung von adressenbindeprotokollen zwischen schichten | |
| WO2013088323A3 (en) | Operation of wireless resource-constrained devices in ip networks | |
| BR112015026543A2 (pt) | métodos para a prevenção de interferência de coexistência no interior de dispositivo e aparelho de comunicações utilizando os mesmos | |
| DE602005010993D1 (de) | Übertragungsvorrichtung zur Reduzierung der Varianz von Verzögerungen und zugehöriges Verfahren | |
| TW200640189A (en) | Method, apparatus and computer program product enabling negotiation of firewall features by endpoints | |
| ATE492996T1 (de) | Verfahren und vorrichtung zur aktualisierung eines geräteprofils |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| RER | Ceased as to paragraph 5 lit. 3 law introducing patent treaties |