ARP协议详解之ARP动态与静态条目的生命周期ARP动态条目的生命周期
动态条目随时间推移自动添加和删除。
C:\Documents and Settings\Administrator>arp -a
No ARP Entries Found
C:\Documents and Settings\Administrator>ping 192.168.7.6
Pinging 192.168.7.6 with 32 bytes of data:
Reply from 192.168.7.6: bytes=32 time<1ms TTL=64
Reply from 192.168.7.6: bytes=32 time<1ms TTL=64
Reply from 192.168.7.6: bytes=32 time<1ms TTL=64
Reply from 192.168.7.6: bytes=32 time<1ms TTL=64
Ping statistics for 192.168.7.6:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
C:\Documents and Settings\Administrator>arp -a
Interface: 192.168.7.8 — 0x2
Internet AddressPhysical AddressType
192.168.7.650-e5-49-eb-46-8ddynamic
C:\Documents and Settings\Administrator>arp -a
No ARP Entries Found
C:\Documents and Settings\Administrator>arp -a
No ARP Entries Found
C:\Documents and Settings\Administrator>ping 192.168.6.100 -t
Pinging 192.168.6.100 with 32 bytes of data:
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
Reply from 192.168.6.100: bytes=32 time<1ms TTL=64
……
C:\Documents and Settings\Administrator>arp -a
Interface: 192.168.7.8 — 0x2
Internet AddressPhysical AddressType
192.168.6.10050-e5-49-eb-46-8ddynamic
ARP静态条目的生命周期
Windows 7中，即使重新启动计算机后，该静态条目仍然保存。下面通过几个实例依次验证各种操作系统对静态条目的处理方式。
C:\Documents and Settings\Administrator>arp -s 192.168.7.7 00-19-21-3f-c3-e5
执行以上命令后，没有任何输出信息。
C:\Documents and Settings\Administrator>arp -a
Interface: 192.168.7.8 — 0x2
Internet AddressPhysical AddressType
192.168.7.700-19-21-3f-c3-e5static
C:\Documents and Settings\Administrator>arp -a
No ARP Entries Found
C:\Documents and Settings\Administrator>arp -s 192.168.7.6 50-e5-49-eb-46-8d
执行以上命令后，没有任何输出信息。
C:\Documents and Settings\Administrator>arp -a
Interface: 192.168.7.8 — 0x2
Internet AddressPhysical AddressType
192.168.7.6 50-e5-49-eb-46-8d静态
C:\Documents and Settings\Administrator>arp -a
Interface: 192.168.7.8 — 0x2
Internet AddressPhysical AddressType
192.168.7.6 50-e5-49-eb-46-8d静态
从输出的信息中可以看到绑定的静态条目仍然存在。
root@kali:~# arp -a
localhost (192.168.5.5) at 00:0c:29:56:bd:21 [ether] on eth0
root@kali:~# arp -s 192.168.5.5 00:0c:29:56:bd
root@kali:~# arp -a
localhost (192.168.5.5) at 00:0c:29:56:bd:00 [ether] PERM on eth0
root@kali:~# arp -a
想要成功，就一定要和成功的人在一起，不然反之
