实施 Arp 扫描
我一直在玩 libpcap/jpcap。实现 arp 扫描器。我向广播地址发送对该块中所有 IP 的请求并读取回复。现在我想不出退出监听功能的方法。现在我等待 2 秒并假设所有客户都做出了回应,但这看起来很脏。谁能推荐一个逻辑来确定扫描是否完成?
I have been playing with libpcap/jpcap. Implementing a arp sweeper. I send a request for all ip's in the block to the broadcast address and read replies. Now i can't think of a way to exit from the listening function. Now i wait 2 secs and assume ever client responded but this just seems dirty. Can anyone recommend a logic to determine if the scan is complete?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
如果花费的时间超过 2 秒,则表明网络存在严重问题。该工具默认为 250 毫秒: http://linux-ip.net/sw /arpsweep/arpsweep.8.html
If it's taking more than 2 seconds then there is something very wrong with the network. This tool defaults at 250 ms: http://linux-ip.net/sw/arpsweep/arpsweep.8.html