1

I had known that I can not stop arp flood from others, so I wonder to know how can I decrease the response times per second, so that my cpu wont cost too much for arp flood, any tips?

1 Answer 1

1

I'm not aware of any measure that would do that (Edit: See below). As this is only an issue in connected networks you could either have static ARP entries and disable ARP learning (if feasible), or you report the attack to the network administrators and have them deal with the attacker.

Update:

You could use ebtables to limit the amount of ARP that reaches your system. ebtables has a --limit module for that. I'm not sure if that will decrease your CPU load. Please note that this could enable DoS as this may limit legitimate ARP traffic.

2
  • Thanks a lot, but I find some router devices have this function to filter/decrease (just for themself) arp flood, so any tips?
    – liunx
    Apr 10, 2013 at 1:34
  • You could use ebtables, see my updated answer. Apr 10, 2013 at 13:12

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .