CN101257517B - Method and device for processing address analysis protocol request message - Google Patents
Method and device for processing address analysis protocol request message Download PDFInfo
- Publication number
- CN101257517B CN101257517B CN200810089913XA CN200810089913A CN101257517B CN 101257517 B CN101257517 B CN 101257517B CN 200810089913X A CN200810089913X A CN 200810089913XA CN 200810089913 A CN200810089913 A CN 200810089913A CN 101257517 B CN101257517 B CN 101257517B
- Authority
- CN
- China
- Prior art keywords
- address
- resolution protocol
- address resolution
- protocol
- packet
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/09—Mapping addresses
- H04L61/10—Mapping addresses of different types
- H04L61/103—Mapping addresses of different types across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Mobile Radio Communication Systems (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
本发明公开了一种地址解析协议请求消息处理方法,包括:在接收到来自发送方的地址解析协议请求包后,根据地址解析协议请求包中的信息构造地址解析协议响应包,并将地址解析协议响应包的源端物理地址设置为预定值;将构造的地址解析协议响应包发送给发送方。此外,本发明还公开了一种地址解析协议请求消息处理装置。根据本发明技术方案,能够保证IP CS网络的稳定性以及数据的正常传送;并且,可以应用在WiMAX网络下的各种形式的用户设备上以及带有各种操作系统(例如,linux操作系统、windows操作系统)的或不带有操作系统的设备,具有较好的通用性。
The invention discloses an address resolution protocol request message processing method, comprising: after receiving an address resolution protocol request packet from a sender, constructing an address resolution protocol response packet according to the information in the address resolution protocol request packet, and analyzing the address The physical address of the source end of the protocol response packet is set to a predetermined value; and the constructed address resolution protocol response packet is sent to the sender. In addition, the invention also discloses an address resolution protocol request message processing device. According to the technical solution of the present invention, the stability of the IP CS network and the normal transmission of data can be guaranteed; and, it can be applied to various forms of user equipment under the WiMAX network and with various operating systems (for example, linux operating system, windows operating system) or devices without an operating system, which have good versatility.
Description
技术领域 technical field
本发明涉及无线通讯领域,并且特别地,涉及一种地址解析协议请求消息处理方法及装置。 The present invention relates to the field of wireless communication, and in particular, relates to a method and device for processing an address resolution protocol request message. the
背景技术 Background technique
和大多数协议一样,IEEE 802.16的介质访问控制子层协议(Medium Access Control,MAC)规范采用分层结构,该协议分为三个子层:服务特定汇聚子层(Service Specific ConvergenceSublayer)、公共部分子层(Common Part Sublayer)、以及安全子层(Security Sublayer)。汇聚子层主要功能是负责将其接入点(SAP)收到的外部数据转换和映射到MAC业务数据单元(SDU),并传递到MAC层业务接入点(SAP),即,将面向连接的公共部分服务(MAC服务)映射成标准类型的服务。 Like most protocols, the Medium Access Control (MAC) specification of IEEE 802.16 adopts a layered structure, and the protocol is divided into three sublayers: Service Specific Convergence Sublayer, Public Part Sublayer Layer (Common Part Sublayer), and Security Sublayer (Security Sublayer). The main function of the convergence sublayer is to be responsible for converting and mapping the external data received by its access point (SAP) to the MAC service data unit (SDU), and passing it to the MAC layer service access point (SAP), that is, connecting The public part of the service (MAC service) is mapped to a standard type of service. the
此外,MAC协议定义了异步传输模式(Asynchronous TransferMode,ATM)CS和Pocket CS两种CS类型,其中Pocket CS提供了对802.3(以太网,Ethernet)、802.1Q(虚拟局域网,VLAN)、以及IP(IPv4,IPv6)等分组业务的映射。 In addition, the MAC protocol defines two CS types, Asynchronous Transfer Mode (ATM) CS and Pocket CS, among which Pocket CS provides support for 802.3 (Ethernet, Ethernet), 802.1Q (Virtual Local Area Network, VLAN), and IP ( IPv4, IPv6) and other packet service mapping. the
IP CS在两个网络终端之间交换IP包。空口上只有IP包被送到微波存取全球互通(Worldwide Interoperability for MicrowaveAccess,WiMAX)基站(Base Station,BS)上,其他协议包都会被丢弃。例如,网络分组交换(Internet work Packet Exchange,IPX)、 序列分组交换(Sequences Pocket Exchange,SPX)包。图1是上述IP格式数据包的报文格式示意图。 IP CS exchanges IP packets between two network endpoints. Only IP packets on the air interface are sent to the Worldwide Interoperability for Microwave Access (WiMAX) base station (Base Station, BS), and other protocol packets are discarded. For example, Internet work Packet Exchange (IPX), sequence packet exchange (Sequences Pocket Exchange, SPX) packets. FIG. 1 is a schematic diagram of the message format of the above-mentioned IP format data packet. the
一般情况下,WiMAX用户设备都会采用带有网络协议栈的操作系统来进行网络相关处理,WiMAX用户设备向操作系统注册成为一个网络接口,通过操作系统的网络协议栈来实现数据包的发送和接收。图2是操作系统中网络协议栈与802.16系统的示意图,如图2所示,在当前的操作系统(例如,linux、windows)中,将802.16网络子系统认为是一种普通的802.3以太网设备,并以802.3接口形式与这个802.16子系统进行通讯。图3是802.3以太网接口的收发包格式。在实际操作中,操作系统的网络协议栈将数据包封装成为如图3所示的以太网包后,交由802.16子系统的MAC层进行处理。 In general, WiMAX user equipment will use an operating system with a network protocol stack for network-related processing. WiMAX user equipment registers with the operating system as a network interface, and sends and receives data packets through the network protocol stack of the operating system. . Figure 2 is a schematic diagram of the network protocol stack and 802.16 system in the operating system, as shown in Figure 2, in the current operating system (for example, linux, windows), the 802.16 network subsystem is considered as a common 802.3 Ethernet device , and communicate with this 802.16 subsystem in the form of 802.3 interface. Figure 3 is the sending and receiving packet format of the 802.3 Ethernet interface. In actual operation, after the network protocol stack of the operating system encapsulates the data packet into an Ethernet packet as shown in Figure 3, it is handed over to the MAC layer of the 802.16 subsystem for processing. the
从图3中还可以看到,以太网包中数据部分除了IP数据报类型(0800)外,还包含有地址解析协议(ARP)请求类型(0806)。ARP可用来实现IP地址到MAC地址的动态转换,利用ARP,可以获取某一IP地址的MAC地址,ARP包格式如图4所示;通过向网络中发送带有此包格式的广播消息,可以获取目的IP地址对应的MAC地址。 It can also be seen from FIG. 3 that, in addition to the IP datagram type (0800), the data part in the Ethernet packet also includes an address resolution protocol (ARP) request type (0806). ARP can be used to realize the dynamic conversion from IP address to MAC address. By using ARP, the MAC address of a certain IP address can be obtained. The ARP packet format is shown in Figure 4; by sending a broadcast message with this packet format to the network, you can Obtain the MAC address corresponding to the destination IP address. the
但在802.16系统中,MAC层是面向连接的,每一个连接均由一个标识符CID(Connect ID)来唯一标识,因此,在数据传输的过程中,不需要用到MAC地址,因此也就不需要以太网的ARP协议。这也是802.16系统中的IPv4 CS对ARP包不进行处理的原因。 But in the 802.16 system, the MAC layer is connection-oriented, and each connection is uniquely identified by an identifier CID (Connect ID). Therefore, in the process of data transmission, the MAC address does not need to be used, so there is no need to Ethernet's ARP protocol is required. This is why the IPv4 CS in the 802.16 system does not process ARP packets. the
因此,在这种802.16系统应用场景下,如果对ARP的请求不处理或者丢弃,就会使从操作系统网络协议栈发出的ARP请求无法得到回应,导致发送流程的失败,从而可能导致通信中断,使WiMAX用户设备无法进行正常的语音或者数据通讯,也就是说,目前存在由于IPv4 CS子层无法正确处理ARP请求而可能导致无法进行正常的电话呼叫或者上网操作的问题。然而,至今尚未提出能够解决该问题的技术方案 Therefore, in this 802.16 system application scenario, if the ARP request is not processed or discarded, the ARP request sent from the network protocol stack of the operating system cannot be responded to, resulting in the failure of the sending process, which may lead to communication interruption. Make WiMAX user equipment unable to perform normal voice or data communication, that is to say, currently there is a problem that normal telephone calls or Internet operations may not be performed due to the inability of the IPv4 CS sublayer to correctly process ARP requests. However, a technical solution that can solve this problem has not been proposed so far
发明内容 Contents of the invention
考虑到上述问题而做出本发明,为此,本发明的主要目的在于提供一种地址解析协议请求消息处理方法及装置。以解决相关技术中针对802.16系统中IPv4CS子层无法正确处理ARP请求的问题。 The present invention is made in consideration of the above problems. Therefore, the main purpose of the present invention is to provide an address resolution protocol request message processing method and device. In order to solve the problem in the related art that the IPv4CS sublayer in the 802.16 system cannot correctly process the ARP request. the
根据本发明的一个实施例,提供了一种地址解析协议请求消息处理方法,用于对802.16系统采用IPv4时的地址解析协议请求消息进行处理。 According to an embodiment of the present invention, an address resolution protocol request message processing method is provided, which is used for processing the address resolution protocol request message when the 802.16 system adopts IPv4. the
该方法包括:在接收到来自发送方的地址解析协议请求包后,根据地址解析协议请求包中的信息构造地址解析协议响应包,并将地址解析协议响应包的源端物理地址设置为预定值,其中,预定值满足以下条件:与本系统内的其它媒体接入控制地址不存在冲突;将构造的地址解析协议响应包发送给发送方。 The method includes: after receiving the address resolution protocol request packet from the sender, constructing the address resolution protocol response packet according to the information in the address resolution protocol request packet, and setting the source end physical address of the address resolution protocol response packet as a predetermined value , where the predetermined value satisfies the following conditions: there is no conflict with other MAC addresses in the system; and the constructed ARP response packet is sent to the sender. the
其中,根据地址解析协议请求包中的以下信息中的至少之一构造地址解析协议响应包:源地址、源地址的类型、用户设备地址、硬件类型、协议类型、协议地址、源协议地址。 Wherein, the ARP response packet is constructed according to at least one of the following information in the ARP request packet: source address, source address type, user equipment address, hardware type, protocol type, protocol address, source protocol address. the
优选地,可以对用户设备地址进行修改,将修改后的用户设备地址作为地址解析协议响应包的源端物理地址。 Preferably, the address of the user equipment can be modified, and the modified address of the user equipment can be used as the source end physical address of the address resolution protocol response packet. the
优选地,修改用户设备地址的方式可以为将用户设备地址加1。 Preferably, the manner of modifying the address of the user equipment may be to add 1 to the address of the user equipment. the
根据本发明的另一实施例,还提供了一种地址解析协议请求消息处理装置,用于对802.16系统采用IPv4时的地址解析协议请求消息进行处理。 According to another embodiment of the present invention, an address resolution protocol request message processing device is also provided, which is used for processing the address resolution protocol request message when the 802.16 system adopts IPv4. the
该装置包括:接收模块,用于接收来自发送方的地址解析协议请求包;构造模块,用于根据地址解析协议请求包中的信息构造地址解析协议响应包,并将地址解析协议响应包的源端物理地址设置为预定值,其中,预定值满足以下条件:与本系统内的其它媒体接入控制地址不存在冲突;发送模块,用于将构造的地址解析协议响应包发送给发送方。 The device includes: a receiving module, configured to receive an address resolution protocol request packet from a sender; a construction module, configured to construct an address resolution protocol response packet according to information in the address resolution protocol request packet, and send the source of the address resolution protocol response packet The terminal physical address is set to a predetermined value, wherein the predetermined value meets the following conditions: there is no conflict with other MAC addresses in the system; the sending module is used to send the constructed ARP response packet to the sender. the
其中,构造模块根据地址解析协议请求包中的以下信息中的至少之一构造地址解析协议响应包:源地址、源地址的类型、用户设备地址、硬件类型、协议类型、协议地址、源协议地址。 Wherein, the construction module constructs the address resolution protocol response packet according to at least one of the following information in the address resolution protocol request packet: source address, source address type, user equipment address, hardware type, protocol type, protocol address, source protocol address . the
优选地,构造模块可以对用户设备地址进行修改,将修改后的用户设备地址作为地址解析协议响应包的源端物理地址。 Preferably, the construction module can modify the user equipment address, and use the modified user equipment address as the source end physical address of the address resolution protocol response packet. the
优选地,构造模块修改用户设备地址的方式可以为将用户设备地址加1。 Preferably, the configuration module modifies the address of the user equipment by adding 1 to the address of the user equipment. the
通过本发明的上述技术方案,能够保证IP CS网络的稳定性以及数据的正常传送;并且,可以应用在WiMAX网络下的各种形式的用户设备上以及带有各种操作系统(例如,linux操作系统、windows操作系统)的或不带有操作系统的设备,具有较好的通用性。 Through the above technical scheme of the present invention, the stability of the IP CS network and the normal transmission of data can be guaranteed; and, it can be applied to various forms of user equipment under the WiMAX network and with various operating systems (for example, linux operating system) system, windows operating system) or devices without an operating system, which have good versatility. the
附图说明Description of drawings
此处所说明的附图用来提供对本发明的进一步理解,构成本申请的一部分,本发明的示意性实施例及其说明用于解释本发明,并不构成对本发明的不当限定。在附图中: The accompanying drawings described here are used to provide a further understanding of the present invention and constitute a part of the application. The schematic embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations to the present invention. In the attached picture:
图1是根据相关技术的IP格式数据包的报文格式的示意图; Fig. 1 is the schematic diagram according to the message format of the IP format packet of related art;
图2是根据相关技术的操作系统中网络协议栈与802.16系统的交互示意图; Fig. 2 is a schematic diagram of the interaction between the network protocol stack and the 802.16 system in the operating system according to the related technology;
图3是根据相关技术的802.3以太网接口的收发包格式的示意图; Fig. 3 is the schematic diagram according to the format of sending and receiving packets of the 802.3 Ethernet interface of related art;
图4是根据相关技术的ARP包格式示意图; Fig. 4 is a schematic diagram of the ARP packet format according to related technologies;
图5是根据本发明方法实施例的地址解析协议请求消息处理方法的流程图; Fig. 5 is the flow chart of the address resolution protocol request message processing method according to the method embodiment of the present invention;
图6是根据本发明方法实施例的地址解析协议请求消息处理方法的详细处理过程的流程图; Fig. 6 is the flow chart of the detailed processing procedure of the address resolution protocol request message processing method according to the method embodiment of the present invention;
图7是根据本发明方法实施例的WiMAX移动台上电接入网络的信令流程图;以及 Fig. 7 is the signaling flowchart of the WiMAX mobile station power-on access network according to the method embodiment of the present invention; And
图8是根据本发明装置实施例的地址解析协议请求消息处理装置的框图。 Fig. 8 is a block diagram of an apparatus for processing an address resolution protocol request message according to an embodiment of the apparatus of the present invention. the
具体实施方式 Detailed ways
方法实施例 Method Example
在本施例中,提供了一种地址解析协议请求消息处理方法,用于对802.16系统采用IPv4时的地址解析协议请求消息进行处理。 In this embodiment, an address resolution protocol request message processing method is provided, which is used for processing the address resolution protocol request message when the 802.16 system adopts IPv4. the
图5是根据本发明实施例的地址解析协议请求消息处理方法的流程图。 Fig. 5 is a flowchart of a method for processing an address resolution protocol request message according to an embodiment of the present invention. the
如图5所示,根据本发明实施例的地址解析协议请求消息处理方法包括:步骤S502,在接收到来自发送方的地址解析协议请求包后,根据地址解析协议请求包中的信息构造地址解析协议响应包,并将地址解析协议响应包的源端物理地址设置为预定值;步骤S504,将构造的地址解析协议响应包发送给发送方。 As shown in FIG. 5, the method for processing an address resolution protocol request message according to an embodiment of the present invention includes: step S502, after receiving the address resolution protocol request packet from the sender, constructing the address resolution protocol according to the information in the address resolution protocol request packet A protocol response packet, and set the source physical address of the ARP response packet as a predetermined value; Step S504, sending the constructed ARP response packet to the sender. the
其中,根据地址解析协议请求包中的以下信息中的至少之一构造地址解析协议响应包:源地址、源地址的类型、用户设备地址、硬件类型、协议类型、协议地址、源协议地址。 Wherein, the ARP response packet is constructed according to at least one of the following information in the ARP request packet: source address, source address type, user equipment address, hardware type, protocol type, protocol address, source protocol address. the
优选地,对用户设备地址进行修改,将修改后的用户设备地址作为地址解析协议响应包的源端物理地址。 Preferably, the user equipment address is modified, and the modified user equipment address is used as the source end physical address of the address resolution protocol response packet. the
也就是说,对于进入802.16子系统中的ARP请求,可以采取一种所谓的ARP欺骗机制来保证发送端得到正确的响应。在数据在发送到802.16系统中后,802.16的IPv4 CS子层首先需要监控接收到的的包格式,如果发现需要发送的包是ARP请求包,则将其截获,填充某一任意的MAC地址(如WiMAX用户设备MAC地址+1)后作为ARP应答直接返回发送端网络协议栈,不再继续向802.16系统的下一步进行发送。这样就可以保证网络协议栈发出的ARP请求及时得到响应,不会影响正常数据的发送。从而提高系统的稳定性。 That is to say, for the ARP request entering the 802.16 subsystem, a so-called ARP spoofing mechanism can be adopted to ensure that the sending end gets a correct response. After the data is sent to the 802.16 system, the IPv4 CS sublayer of 802.16 first needs to monitor the received packet format, if it is found that the packet to be sent is an ARP request packet, it will be intercepted and filled with an arbitrary MAC address ( For example, the MAC address of the WiMAX user equipment + 1) is directly returned to the network protocol stack at the sending end as an ARP response, and does not continue to send to the next step of the 802.16 system. In this way, it can be ensured that the ARP request sent by the network protocol stack will be responded in time, and normal data transmission will not be affected. Thereby improving the stability of the system. the
为了执行这个过程,我们需要构造一个以太网格式的ARP响应包,即,如图3所示,首先要设置以太网头,包括目的地址、源地址和类型,其中目的地址和类型,可以从ARP请求包中获得,源地址用WiMAX用户设备的地址来填充。接下来是填充ARP字段(如 图4所示),这其中的大部分内容都可以从ARP请求包中获得,包括硬件类型、协议类型、目的端物理地址、协议地址和源端协议地址等。 In order to perform this process, we need to construct an ARP response packet in Ethernet format, that is, as shown in Figure 3, we must first set the Ethernet header, including destination address, source address and type, where the destination address and type can be obtained from ARP Obtained from the request packet, the source address is filled with the address of the WiMAX user equipment. The next step is to fill in the ARP field (as shown in Figure 4), most of which can be obtained from the ARP request packet, including hardware type, protocol type, destination physical address, protocol address, and source protocol address. the
优选地,考虑到处理速度等因素,修改用户设备地址的方式为将用户设备地址加1(WiMAX用户设备MAC地址+1)。本领域技术人员应当理解,将地址加1仅是一个实例,在实际应用当中还可以以其它方式进行修改,例如,对用户设备MAC地址加上其它值、减去某值。总之,作为上述预定值的用户设备MAC地址应当满足以下条件:与本系统内的其它媒体接入控制地址不存在冲突。 Preferably, considering factors such as processing speed, the method of modifying the user equipment address is to add 1 to the user equipment address (WiMAX user equipment MAC address+1). Those skilled in the art should understand that adding 1 to the address is just an example, and it can also be modified in other ways in practical applications, for example, adding other values to or subtracting a certain value from the MAC address of the user equipment. In a word, the MAC address of the user equipment as the predetermined value above should satisfy the following condition: no conflict with other MAC addresses in the system. the
也就是说,要注意源端物理地址的取值,应该选取一个合适的值(上述预定值)。这个值的选取的主要依据是不和本系统中其他MAC地址冲突,一般情况下,我们选择WiMAX用户设备的MAC地址加1。 That is to say, attention should be paid to the value of the physical address of the source end, and an appropriate value (the aforementioned predetermined value) should be selected. The main basis for selecting this value is not to conflict with other MAC addresses in the system. Generally, we select the MAC address of the WiMAX user equipment plus 1. the
ARP响应所需的字段填充完毕之后,就可以调用接收函数,802.16 IPV4 CS子层将这个ARP响应包发回给网络协议栈(Step504-508)。 After the required fields of the ARP response are filled, the receiving function can be called, and the 802.16 IPV4 CS sublayer sends the ARP response packet back to the network protocol stack (Step504-508). the
根据这种方式,WiMAX用户设备中的操作系统的网络协议栈就能够得到及时正确的ARP响应包,并根据内容更新自己的ARP列表。 According to this method, the network protocol stack of the operating system in the WiMAX user equipment can obtain a timely and correct ARP response packet, and update its own ARP list according to the content. the
图6是根据本发明方法实施例中优选实施例的流程图。下面,结合图6对上述技术方案的处理进行说明。如图6所示,具体包括以下处理过程: Fig. 6 is a flow chart of a preferred embodiment of the method embodiments according to the present invention. Next, the processing of the above technical solution will be described with reference to FIG. 6 . As shown in Figure 6, it specifically includes the following processing procedures:
步骤601-603,802.16系统的IPv4 CS子层检测接收到的数据包,判断是否是ARP请求包; Steps 601-603, the IPv4 CS sublayer of the 802.16 system detects the received packet, and judges whether it is an ARP request packet;
这里有两种情况,第一种情况,是从图2所示的类型字段定义中获得;第二种情况,如果IPv4电路域(CS)子层检测到发来的包不是ARP请求包,则对此IP包数据进行接下来正常的802.16处理(步骤610); There are two cases here, the first case is obtained from the type field definition shown in Figure 2; the second case, if the IPv4 circuit domain (CS) sublayer detects that the packet sent is not an ARP request packet, then Carry out next normal 802.16 processing (step 610) to this IP packet data;
步骤604-608,如果IPv4 CS子层检测到包类型的确是的ARP包,则根据接收包构造ARP响应包,其中的目的物理地址可以任意选定,在添加上以太网头之后利用操作系统协议栈的接收函数通过802.3接口将其发回网络协议栈。 Steps 604-608, if the IPv4 CS sublayer detects that the packet type is indeed an ARP packet, then construct an ARP response packet according to the received packet, wherein the destination physical address can be arbitrarily selected, and use the operating system protocol after adding the Ethernet header The receiving function of the stack sends it back to the network protocol stack through the 802.3 interface. the
下面将以WiMAX移动台MS上电开机初始化寻找网络的过程为例,对上述的技术方案进行详细说明。 The above technical solution will be described in detail below by taking the process of powering on and starting up the WiMAX mobile station MS to initialize and search for a network as an example. the
对于这个过程,需要说明的是,图7只是MS上电接入网络的大致示意图,并不代表MS完整的接入过程。出于清楚的目的,这里仅示出了简化的处理过程,本领域技术人员应当理解,在实际应用当中MS和BS之间交互的指令和过程比图7所示过程复杂。 Regarding this process, it should be noted that FIG. 7 is only a schematic diagram of the MS being powered on and accessing the network, and does not represent the complete access process of the MS. For the purpose of clarity, only simplified processing procedures are shown here, and those skilled in the art should understand that in actual applications, the commands and procedures for interaction between the MS and the BS are more complex than those shown in FIG. 7 . the
如图7所示,具体包括以下步骤: As shown in Figure 7, it specifically includes the following steps:
步骤710-730,进行物理层同步,MAC层同步以及网络接入后,在MS向BS侧的动态主机配置协议(DHCP)服务器发送DHCP请求IP地址并成功获取后,为了验证连接是否成功,MS向BS发出了一个ping指令(步骤750),在执行这个ping指令时,MS首先查询自身的ARP列表中是否是有此IP对应的MAC地址,如果没有,就会发出一个ARP请求,根据前面的描述,802.16系统的IP CS不会处理这个ARP请求,这种情况下,就必须对这个ARP请求作出欺骗处理。 Steps 710-730, after performing physical layer synchronization, MAC layer synchronization and network access, after the MS sends a DHCP request IP address to the Dynamic Host Configuration Protocol (DHCP) server on the BS side and successfully obtains it, in order to verify whether the connection is successful, the MS Sent a ping command (step 750) to BS, when executing this ping command, MS at first inquires whether there is the MAC address corresponding to this IP in the ARP list of itself, if not, will send an ARP request, according to the preceding Description, the IP CS of the 802.16 system will not process this ARP request, in this case, it is necessary to spoof the ARP request. the
在这个过程中,ping指令不会因为没有获取正确的目的MAC地址而导致错误。在前面提到过,802.16系统是面向连接的系统, 其正确连接不是依赖MAC地址,而是通过连接标识(Connect ID,CID)与连接建立关系的,并从CID获得目的地址和服务质量(Quality of Serives,QoS)要求。MS的CID是从图7中的测距过程的RNG-RSP消息获取的(步骤730)。 In this process, the ping command will not cause an error because the correct destination MAC address is not obtained. As mentioned earlier, the 802.16 system is a connection-oriented system. Its correct connection does not depend on the MAC address, but establishes a relationship with the connection through the connection identifier (Connect ID, CID), and obtains the destination address and quality of service (Quality of Service) from the CID. of Serives, QoS) requirements. The CID of the MS is obtained from the RNG-RSP message of the ranging procedure in FIG. 7 (step 730). the
上述的应用示例只是ARP欺骗的一个具体应用,在实际的网络操作中,还有很多需要发送ARP请求的应用的指令操作,对与这些操作,也都需要采取ARP欺骗的方法,保证通讯的正常。 The above application example is just a specific application of ARP spoofing. In actual network operations, there are still many application instruction operations that need to send ARP requests. For these operations, ARP spoofing methods are also required to ensure normal communication. . the
对于802.16系统,还需要说明的是,这样的ARP欺骗并不会影响IP数据包的正常发送。从前面的叙述中得知,需要发送的IP数据包从操作系统的网络协议栈进入802.16系统时,需要在头部添加目的地址、源地址和类型等字段,被封装成为为以太网包,而当802.16系统把数据最终传送到空中的时候,对于802.16的IP CS,其净荷的格式又需要被还原成为IP包格式,不再包含以太网头。在真正进行数据传送的时候并没有用到目的地址、源地址等字段。所以即使此处的目的地址是通过ARP欺骗获取来的非正确地址,也不会影响数据的正常传送。 For the 802.16 system, it should also be noted that such ARP spoofing will not affect the normal sending of IP data packets. It is known from the previous description that when the IP data packet to be sent enters the 802.16 system from the network protocol stack of the operating system, fields such as the destination address, source address, and type need to be added to the header to be encapsulated into an Ethernet packet, and When the 802.16 system finally transmits the data to the air, for the 802.16 IP CS, the format of the payload needs to be restored to the IP packet format, and the Ethernet header is no longer included. Fields such as the destination address and source address are not used when actually transmitting data. Therefore, even if the destination address here is an incorrect address obtained through ARP spoofing, it will not affect the normal transmission of data. the
在上面的叙述中,涉及的操作系统时,是以linux操作系统为例的,实际上,在带有其他操作系统(例如,windows)的802.16系统中,对ARP请求的指令的处理也是一样的,只是由于各个操作系统的网络层协议的接口实现方式不同,导致实际操作时调用的接口函数有所差别,但其原理和操作流程都是完全相同的。 In the above description, the operating system involved is linux operating system as an example. In fact, in 802.16 systems with other operating systems (for example, windows), the processing of ARP request instructions is also the same , but because the interface implementation methods of the network layer protocols of each operating system are different, the interface functions called during actual operation are different, but the principle and operation process are exactly the same. the
装置实施例 Device embodiment
在实施例中,提供了一种地址解析协议请求消息处理装置,用于对802.16系统采用IPv4时的地址解析协议请求消息进行处理。图8是根据本实施例的地址解析协议请求消息处理装置框图。 In the embodiment, an address resolution protocol request message processing device is provided, which is used for processing the address resolution protocol request message when the 802.16 system adopts IPv4. Fig. 8 is a block diagram of an apparatus for processing an address resolution protocol request message according to this embodiment. the
如图8所示,该装置包括:接收模块802,用于接收来自发送方的地址解析协议请求包;构造模块804,用于根据地址解析协议请求包中的信息构造地址解析协议响应包,并将地址解析协议响应包的源端物理地址设置为预定值;发送模块806,用于将构造的地址解析协议响应包发送给发送方。 As shown in Figure 8, the device includes: a receiving module 802, configured to receive an address resolution protocol request packet from the sender; a construction module 804, configured to construct an address resolution protocol response packet according to information in the address resolution protocol request packet, and Set the physical address of the source end of the ARP response packet to a predetermined value; the sending module 806 is configured to send the constructed ARP response packet to the sender. the
其中,构造模块804根据地址解析协议请求包中的以下信息中的至少之一构造地址解析协议响应包:源地址、源地址的类型、用户设备地址、硬件类型、协议类型、协议地址、源协议地址。 Wherein, the construction module 804 constructs the address resolution protocol response packet according to at least one of the following information in the address resolution protocol request packet: source address, source address type, user equipment address, hardware type, protocol type, protocol address, source protocol address. the
优选地,构造模块804可以对用户设备地址进行修改,将修改后的用户设备地址作为地址解析协议响应包的源端物理地址。 Preferably, the construction module 804 can modify the user equipment address, and use the modified user equipment address as the source end physical address of the address resolution protocol response packet. the
优选地,构造模块804修改用户设备地址的方式可以为将用户设备地址加1。 Preferably, the configuration module 804 may modify the address of the user equipment by adding 1 to the address of the user equipment. the
优选地,预定值满足以下条件:与本系统内的其它媒体接入控制地址不存在冲突。 Preferably, the predetermined value satisfies the following condition: there is no conflict with other MAC addresses in the system. the
综上所述,借助于本发明的技术方案,能够保证IP CS网络的稳定性以及数据的正常传送;并且,可以应用在WiMAX网络下的各种形式的用户设备上以及带有各种操作系统(例如,linux操作系统、windows操作系统)的或不带有操作系统的设备,本发明具有较好的通用性;此外,还对802.16协议中的IP CS部分进行了补充和完善。 In summary, by means of the technical solution of the present invention, the stability of the IP CS network and the normal transmission of data can be guaranteed; and, it can be applied to various forms of user equipment under the WiMAX network and with various operating systems (for example, linux operating system, windows operating system) or equipment without operating system, the present invention has better versatility; In addition, the IP CS part in the 802.16 protocol has also been supplemented and perfected. the
以上所述仅为本发明的优选实施例而已,并不用于限制本发明,对于本领域的技术人员来说,本发明可以有各种更改和变化。凡在本发明的精神和原则之内,所作的任何修改、等同替换、改进等,均应包含在本发明的保护范围之内。 The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and changes. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention. the
Claims (8)
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200810089913XA CN101257517B (en) | 2008-04-09 | 2008-04-09 | Method and device for processing address analysis protocol request message |
| PCT/CN2008/073789 WO2009124444A1 (en) | 2008-04-09 | 2008-12-26 | Method and apparatus for processing the arp request message |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200810089913XA CN101257517B (en) | 2008-04-09 | 2008-04-09 | Method and device for processing address analysis protocol request message |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101257517A CN101257517A (en) | 2008-09-03 |
| CN101257517B true CN101257517B (en) | 2012-05-09 |
Family
ID=39891982
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN200810089913XA Expired - Fee Related CN101257517B (en) | 2008-04-09 | 2008-04-09 | Method and device for processing address analysis protocol request message |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN101257517B (en) |
| WO (1) | WO2009124444A1 (en) |
Families Citing this family (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101257517B (en) * | 2008-04-09 | 2012-05-09 | 中兴通讯股份有限公司 | Method and device for processing address analysis protocol request message |
| EP2649766A4 (en) * | 2010-12-11 | 2014-06-04 | Hewlett Packard Development Co | SEARCH FOR COMPUTER NETWORK N UDS |
| US9455948B2 (en) * | 2012-06-29 | 2016-09-27 | Cisco Technology, Inc. | Reducing proliferation of network-to-link-layer address resolution messages |
| CN107995322A (en) * | 2017-11-24 | 2018-05-04 | 上海市共进通信技术有限公司 | Method by sending instructions under ARP messages |
| CN108881425B (en) * | 2018-06-07 | 2020-12-25 | 中国科学技术大学 | Data packet processing method and system |
| CN119420680B (en) * | 2025-01-06 | 2025-04-25 | 深圳市丰润达科技有限公司 | Automatic testing method, device, equipment and storage medium for gateway-based service quality binding |
| CN119945807B (en) * | 2025-04-09 | 2025-06-24 | 重庆赛力斯凤凰智创科技有限公司 | ARP attack defense method, data sending end and data receiving end |
Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1946041A (en) * | 2006-06-20 | 2007-04-11 | 杭州华为三康技术有限公司 | VLAN polymerizing method, converging exchanger and system based on ARP detector intercept |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20060015635A1 (en) * | 2004-06-17 | 2006-01-19 | International Business Machines Corporation | Method and apparatus for handling address resolution protocol requests for a device having multiple interfaces |
| CN100563245C (en) * | 2005-04-27 | 2009-11-25 | 华为技术有限公司 | A Defense Method Against ARP Flooding Attack |
| CN100536474C (en) * | 2006-09-14 | 2009-09-02 | 杭州华三通信技术有限公司 | Method and equipment for preventing network attack by using address analytic protocol |
| CN101257517B (en) * | 2008-04-09 | 2012-05-09 | 中兴通讯股份有限公司 | Method and device for processing address analysis protocol request message |
-
2008
- 2008-04-09 CN CN200810089913XA patent/CN101257517B/en not_active Expired - Fee Related
- 2008-12-26 WO PCT/CN2008/073789 patent/WO2009124444A1/en not_active Ceased
Patent Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1946041A (en) * | 2006-06-20 | 2007-04-11 | 杭州华为三康技术有限公司 | VLAN polymerizing method, converging exchanger and system based on ARP detector intercept |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101257517A (en) | 2008-09-03 |
| WO2009124444A1 (en) | 2009-10-15 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110417840B (en) | Information processing method and device | |
| EP3639487B1 (en) | Conveying non-access stratum messages over ethernet | |
| CN114885443B (en) | Multi-mode network control system and method supporting mobile access of terminal | |
| CN114073043B (en) | Method and device for managing Ethernet bridge ports | |
| US9516070B2 (en) | Method for establishing channel for managing IPV4 terminal and network gateway | |
| US11356294B2 (en) | Packet processing method and device | |
| CN101257517B (en) | Method and device for processing address analysis protocol request message | |
| WO2012155867A1 (en) | Packet sending method and access controller | |
| CN104539902A (en) | IPC remote access method and system | |
| CN102244687B (en) | Method, device and system for acquiring multi-address message | |
| CN114385314A (en) | Internet of things equipment data migration system, method and device and storage medium | |
| CN112261054B (en) | Ethernet/IP and IPv6 protocol conversion system and method based on application service quality | |
| CN104168273B (en) | Method and system for implementing TCP proxy in thin AP mode | |
| WO2010001684A1 (en) | Communication system | |
| WO2013185696A2 (en) | Data processing method and device | |
| CN100479457C (en) | Implementation method for transferring data in virtual private network | |
| CN109922164B (en) | Address translation method and device and computer storage medium | |
| CN101510901B (en) | Communication method, communication apparatus and system between distributed equipment | |
| WO2015096734A1 (en) | Downlink transmission method for service data, and packet data gateway | |
| CN103167051A (en) | Method and system for identity position mapping relationship maintenance | |
| CN102056287B (en) | Method and system for realizing identity and location separation based on network | |
| CN102624629B (en) | A kind of wide area network message transmitting method and device | |
| US20200137726A1 (en) | Communications device and communication method | |
| CN103533100B (en) | Message transmitting method and node device | |
| CN111654390A (en) | A data transmission method, device, terminal device and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20120509 Termination date: 20210409 |
