Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I had known that I can not stop arp flood from others, so I wonder to know how can I decrease the response times per second, so that my cpu wont cost too much for arp flood, any tips?

share|improve this question
up vote 1 down vote accepted

I'm not aware of any measure that would do that (Edit: See below). As this is only an issue in connected networks you could either have static ARP entries and disable ARP learning (if feasible), or you report the attack to the network administrators and have them deal with the attacker.


You could use ebtables to limit the amount of ARP that reaches your system. ebtables has a --limit module for that. I'm not sure if that will decrease your CPU load. Please note that this could enable DoS as this may limit legitimate ARP traffic.

share|improve this answer
Thanks a lot, but I find some router devices have this function to filter/decrease (just for themself) arp flood, so any tips? – liunx Apr 10 '13 at 1:34
You could use ebtables, see my updated answer. – Sebastian Apr 10 '13 at 13:12
Thanks very much, I'll try it! – liunx Apr 26 '13 at 1:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.