基于ETHERNET的网络监听以及ARP欺骗

网络监听就像网络中的一把双刃剑，一方面它在监测网络性能、排除网络故障方面起着不可替代的作用；另一方面，由于其本身具有非常强的隐蔽性，一旦其被黑客用来进行网络嗅探，则会给以太网的安全带来极大的隐患。本文主要分析了网络监听的基本原理，对基于ARP协议的欺骗模式进行了研究，最后根据对实验的分析总结提出了对应的安全建议。

BASED ETHERNET NETWORK MONITORING AND ARP SPOOF

Network monitoring is a very contradictory technology. On one hand, it plays an indispensable role in the aspect of analyzing network performance, predicting network traffic, diagnosing network problem and so on. On the other hand, as its born quality of concealment, once it is used by some crackers, it will result in many security problems. This paper presents the principle of network monitoring, describes the details of ARP spoof, and basing which shows the experiment processes of how to sniff in a switch network. Finally, we give some suggestions about how to prevent malicious hosts from sniffing the important information.