{"id":2724,"date":"2019-05-28T23:24:09","date_gmt":"2019-05-28T15:24:09","guid":{"rendered":"https:\/\/www.linuxcool.com\/?p=2724"},"modified":"2019-05-28T23:30:56","modified_gmt":"2019-05-28T15:30:56","slug":"arpwatch","status":"publish","type":"post","link":"https:\/\/www.linuxcool.com\/arpwatch","title":{"rendered":"arpwatch\u547d\u4ee4 – \u76d1\u542c\u7f51\u7edc\u4e0aARP\u7684\u8bb0\u5f55"},"content":{"rendered":"\n

arpwatch\u547d\u4ee4\u7528\u4e8e\u76d1\u542c\u7f51\u7edc\u4e0aARP\u7684\u8bb0\u5f55\u3002<\/p>\n\n\n\n

ARP(Address Resolution Protocol)\u662f\u7528\u6765\u89e3\u6790IP\u4e0e\u7f51\u7edc\u88c5\u7f6e\u786c\u4ef6\u5730\u5740\u7684\u534f\u8bae\u3002 arpwatch\u53ef\u76d1\u542c\u533a\u57df\u7f51\u7edc\u4e2d\u7684ARP\u6570\u636e\u5305\u5e76\u8bb0\u5f55\uff0c\u540c\u65f6\u5c06\u76d1\u542c\u5230\u7684\u53d8\u5316\u901a\u8fc7E-mail\u6765\u62a5\u544a\u3002 <\/p>\n\n\n\n

\u8bed\u6cd5\u683c\u5f0f\uff1a<\/strong> arpwatch [\u53c2\u6570] <\/p>\n\n\n\n

\u5e38\u7528\u53c2\u6570\uff1a<\/strong><\/p>\n\n\n\n
-d <\/td>\u542f\u52a8\u6392\u9519\u6a21\u5f0f<\/td><\/tr>
-f<\/td>\u8bbe\u7f6e\u5b58\u50a8ARP\u8bb0\u5f55\u7684\u6587\u4ef6\uff0c\u9884\u8bbe\u4e3a\/var\/arpwatch\/arp.dat<\/td><\/tr>
-i<\/td>\u6307\u5b9a\u76d1\u542cARP\u7684\u63a5\u53e3\uff0c\u9884\u8bbe\u7684\u63a5\u53e3\u4e3aeth0<\/td><\/tr>
-r<\/td>\u4ece\u6307\u5b9a\u7684\u6587\u4ef6\u4e2d\u8bfb\u53d6ARP\u8bb0\u5f55\uff0c\u800c\u4e0d\u662f\u4ece\u7f51\u7edc\u4e0a\u76d1\u542c<\/td><\/tr>
-n  <\/td>\u6307\u5b9a\u9644\u52a0\u7684\u672c\u5730\u7f51\u7edc <\/td><\/tr>
-u <\/td>\u6307\u5b9a\u7528\u6237\u548c\u7528\u6237\u7ec4 <\/td><\/tr>
-e <\/td>\u53d1\u9001\u90ae\u4ef6\u7ed9\u6307\u5b9a\u7528\u6237\uff0c\u975e\u9ed8\u8ba4\u7684root\u7528\u6237 <\/td><\/tr>
-s <\/td>\u6307\u5b9a\u7528\u6237\u540d\u4f5c\u4e3a\u8fd4\u56de\u5730\u5740\uff0c\u800c\u4e0d\u662f\u9ed8\u8ba4\u7684\u7528\u6237root <\/td><\/tr><\/tbody><\/table>\n\n\n\n

\u53c2\u8003\u5b9e\u4f8b<\/strong><\/p>\n\n\n\n

\u76d1\u542c\u7f51\u5361eth0\u7684ARP\u4fe1\u606f\uff1a<\/p>\n\n\n\n

[root@linuxcool ~]# arpwatch -i eth0  <\/pre>\n\n\n\n

\u76d1\u542cARP\u7684\u4fe1\u606f\uff0c\u5c06\u76f8\u5173\u4fe1\u606f\u8bb0\u5f55\u5230\u76f8\u5e94\u7684\u6587\u4ef6\uff1a<\/p>\n\n\n\n

[root@linuxcool ~]# arpwatch -i eth0 -f a.log<\/pre>\n","protected":false},"excerpt":{"rendered":"

arpwatch\u547d\u4ee4\u7528\u4e8e\u76d1\u542c\u7f51\u7edc\u4e0aARP\u7684\u8bb0\u5f55\u3002 ARP(Address Resolution Protoco […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[6],"tags":[],"_links":{"self":[{"href":"https:\/\/www.linuxcool.com\/wp-json\/wp\/v2\/posts\/2724"}],"collection":[{"href":"https:\/\/www.linuxcool.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.linuxcool.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.linuxcool.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.linuxcool.com\/wp-json\/wp\/v2\/comments?post=2724"}],"version-history":[{"count":5,"href":"https:\/\/www.linuxcool.com\/wp-json\/wp\/v2\/posts\/2724\/revisions"}],"predecessor-version":[{"id":2893,"href":"https:\/\/www.linuxcool.com\/wp-json\/wp\/v2\/posts\/2724\/revisions\/2893"}],"wp:attachment":[{"href":"https:\/\/www.linuxcool.com\/wp-json\/wp\/v2\/media?parent=2724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.linuxcool.com\/wp-json\/wp\/v2\/categories?post=2724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.linuxcool.com\/wp-json\/wp\/v2\/tags?post=2724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}