Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I had known that I can not stop arp flood from others, so I wonder to know how can I decrease the response times per second, so that my cpu wont cost too much for arp flood, any tips?

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

I'm not aware of any measure that would do that (Edit: See below). As this is only an issue in connected networks you could either have static ARP entries and disable ARP learning (if feasible), or you report the attack to the network administrators and have them deal with the attacker.

Update:

You could use ebtables to limit the amount of ARP that reaches your system. ebtables has a --limit module for that. I'm not sure if that will decrease your CPU load. Please note that this could enable DoS as this may limit legitimate ARP traffic.

share|improve this answer
    
Thanks a lot, but I find some router devices have this function to filter/decrease (just for themself) arp flood, so any tips? –  liunx Apr 10 '13 at 1:34
    
You could use ebtables, see my updated answer. –  Sebastian Apr 10 '13 at 13:12
    
Thanks very much, I'll try it! –  liunx Apr 26 '13 at 1:30
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.