ITPub博客

首页 > Linux操作系统 > Linux操作系统 > 局域网ARP病毒的处理过程

局域网ARP病毒的处理过程

原创 Linux操作系统 作者:蓝魔之恋 时间:2012-01-10 09:26:55 0 删除 编辑
问题产生:公司三楼整个局域网变得不稳定,pdm系统无法访问。
解决过程:1.登陆5624交换机,发现系统产生大量ARP病毒信息。
#Jan 10 09:30:52:332 2012 Quidway ARP/5/DUPIP:- 1 -IP address 192.168.23.128 collision detected, sourced by f0de-f13c-ab32 on GigabitEthernet1/0/3 of VLAN23 and 001e-902e-6fcb on GigabitEthernet1/0/3 of VLAN23
#Jan 10 09:30:52:333 2012 Quidway ARP/5/DUPIP:- 1 -IP address 192.168.23.129 collision detected, sourced by 4437-e62c-2642 on GigabitEthernet1/0/3 of VLAN23 and 001e-902e-6fcb on GigabitEthernet1/0/3 of VLAN23
#Jan 10 09:30:52:334 2012 Quidway ARP/5/DUPIP:- 1 -IP address 192.168.23.133 collision detected, sourced by 001e-8c48-b2cd on GigabitEthernet1/0/3 of VLAN23 and 001e-902e-6fcb on GigabitEthernet1/0/3 of VLAN23
#Jan 10 09:30:52:335 2012 Quidway ARP/5/DUPIP:- 1 -IP address 192.168.23.151 collision detected, sourced by 0023-5445-121c on GigabitEthernet1/0/3 of VLAN23 and 001e-902e-6fcb on GigabitEthernet1/0/3 of VLAN23
#Jan 10 09:30:52:336 2012 Quidway ARP/5/DUPIP:- 1 -IP address 192.168.23.152 collision detected, sourced by 4487-fc4c-849a on GigabitEthernet1/0/3 of VLAN23 and 001e-902e-6fcb on GigabitEthernet1/0/3 of VLAN23
#Jan 10 09:30:52:338 2012 Quidway ARP/5/DUPIP:- 1 -IP address 192.168.23.164 collision detected, sourced by 001d-6085-ef39 on GigabitEthernet1/0/3 of VLAN23 and 001e-902e-6fcb on GigabitEthernet1/0/3 of VLAN23
#Jan 10 09:30:52:339 2012 Quidway ARP/5/DUPIP:- 1 -IP address 192.168.23.169 collision detected, sourced by 4437-e61f-77c6 on GigabitEthernet1/0/3 of VLAN23 and 001e-902e-6fcb on GigabitEthernet1/0/3 of VLAN23
#Jan 10 09:30:52:340 2012 Quidway ARP/5/DUPIP:- 1 -IP address 192.168.23.173 collision detected, sourced by 90e6-ba2e-a764 on GigabitEthernet1/0/3 of VLAN23 and 001e-902e-6fcb on GigabitEthernet1/0/3 of VLAN23
#Jan 10 09:30:52:341 2012 Quidway ARP/5/DUPIP:- 1 -IP address 192.168.23.192 collision detected, sourced by 001d-60ab-24da on GigabitEthernet1/0/3 of VLAN23 and 001e-902e-6fcb on GigabitEthernet1/0/3 of VLAN23
#Jan 10 09:30:52:342 2012 Quidway ARP/5/DUPIP:- 1 -IP address 192.168.23.197 collision detected, sourced by 0021-cc39-08e3 on GigabitEthernet1/0/3 of VLAN23 and 001e-902e-6fcb on GigabitEthernet1/0/3 of VLAN23
#Jan 10 09:30:52:343 2012 Quidway ARP/5/DUPIP:- 1 -IP address 192.168.23.199 collision detected, sourced by 4437-e610-a233 on GigabitEthernet1/0/3 of VLAN23 and 001e-902e-6fcb on GigabitEthernet1/0/3 of VLAN23。
2.找到出现频率最多MAC,找到这台电脑,拔掉网线,交换机正常。

来自 “ ITPUB博客 ” ,链接:https://blog.itpub.net/8362857/viewspace-714645/ ,如需转载,请注明出处,否则将追究法律责任。

上一篇: ORA-3137(12333)错误
下一篇: 没有了~
请登录后发表评论 登录
全部评论

注册时间:2009-07-08

  • 博文量
    22
  • 访问量
    41963