Detect ARP poisoning(ARP spoofing) & ARP flooding

[DevidHuang]

ARP, because of its simpleness, fastness, and effectiveness, is becoming increasingly popular among internet raggers, thus causing severe influence to the internet environment.With Ax3soft Sax2, we can quickly and accurately locate ARP source when ARP attack happens to the network, so as to ensure normal and reliable network operation.Solutioniagnosis View is the most direct and effective place to locate ARP attack and should be our first choice. Its interface is displayed as picture1.

(picture1)Picture 1 definitely points out that there are two kinds of ARP attack event, ARP Scan and ARP MAC address changed, in the network, and the attack source is clearly given at the bottom. Meanwhile, Sax2 NIDS will provide reasons of such ARP attacks and corresponding solutions.

 

[dickman003]

Hey Devid,

It sounds really interesting. If you don't mind could you please post the name of the software you use for this. Thanks.

 

[DevidHuang]

Re:

Hi dickman003,
I used the sax2 NIDS, For more information, visit http://www.ids-sax2.com/SaxIDS.htm.

 

[dickman003]

Thanks for the link DevidHuang. I really appreciate that.

Mr. X-pert, I feel sorry about the way you think about members in this EK. If a member asks a question from some one and that person replies to that... would you think that is spamming..?? No mate.. you lost your way... please don't think for the sake of 2 user names starts with D, that s same person posting and replying to the same message.