路由器不断发ARP包，重启之后就解决

lzq123

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
23:52:56.347772 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:52:58.547444 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:00.748633 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:02.948849 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:04.949693 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:07.150982 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:09.350993 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:11.552539 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:13.753775 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:15.954590 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:18.154311 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:20.355756 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:22.557093 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:24.760037 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:26.757738 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:28.958181 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:31.158638 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:33.358894 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:34.111310 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.19 tell 192.168.10.1
23:53:34.111667 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.19 tell 192.168.10.1
23:53:35.558696 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:37.762167 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:39.960095 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:42.161382 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:44.360639 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:46.561873 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:47.650662 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.128 tell 192.168.10.1
23:53:48.762803 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:50.963865 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:53.161942 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:55.362799 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:57.563122 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:53:59.764093 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:01.962310 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:04.163062 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:06.363285 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:08.562657 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:10.763645 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:12.763885 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:14.963602 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:17.164002 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:19.364246 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:21.565921 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:23.766485 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:25.966923 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:28.167193 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:30.367550 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:32.568825 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:34.769178 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:36.968388 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:39.169077 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.18 tell 192.168.10.1
23:54:42.472838 00:0a:eb:b3:ed:8c (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: arp who-has 192.168.10.1 tell 192.168.10.1

而192.168.10.18这台机子是关着的，不知道为什么路由器像疯了一样发包，而我重启路由之后就没事儿。每到晚上就这样，白天机子开着却没事情发生。这算是ARP攻击吗？是什么原因呢？网关确实是路由器的网关，我们的网络是接在另一个局域网下级的。我不知道攻击源是谁。

[ 本帖最后由 lzq123 于 2008-5-16 00:10 编辑 ]

kentchoi

是有什么东西，需要通过路由器访问 18那个机器。。。

导致路由器一直寻找那个那个18机器的mac。。。

不知道路由器这种算是故障，还是什么

经世致用

看不懂哦