arp (操縱或顯示內核的IPv4網絡鄰居緩存)

rose1 發表于 2020-08-27 16:14

瀏覽次數：

命令行 Unix&Linux命令 arp

在手機上閱讀

釋放雙眼，帶上耳機，聽聽看~！

00:00

在Linux操作系統上，arp命令可操縱或顯示內核的IPv4網絡鄰居緩存。它可以向表中添加條目，刪除一個條目或顯示當前內容。 ARP代表地址解析協議，用于為給定的IPv4地址查找網絡鄰居的地址。

查看英文版

1 arp 運行系統環境

2 安裝arp

3 arp 語法

4 arp 例子

arp 運行系統環境

Linux

安裝arp

Arp是net-tools軟件包的一部分。例如，在使用APT進行軟件包管理的系統上，可以使用apt-get安裝它：

sudo apt-get update && sudo apt-get install net-tools

Arp is part of the net-tools package. For example, on systems that use APT for package management, it can be installed with apt-get:

sudo apt-get update && sudo apt-get install net-tools

查看英文版

arp 語法

arp [-vn] [-H type] [-i if] -a [hostname]

arp [-v] [-i if] -d hostname [pub]

arp [-v] [-H type] [-i if] -s hostname hw_addr [temp]

arp [-v] [-H type] [-i if] -s hostname hw_addr [netmask nm] pub

arp [-v] [-H type] [-i if] -Ds hostname ifa [netmask nm] pub

arp [-vnD] [-H type] [-i if] -f [filename]

模式

沒有模式說明符的arp將打印表的當前內容。通過指定硬件地址類型，接口名稱或主機地址，可以限制打印的條目數。

arp -d address刪除ARP表條目。必須具有root特權。該條目通過IP地址找到。如果提供了主機名，則在查找ARP表中的條目之前將對其進行解析。

命令：

arp -s address hw_addr

用于設置新表條目。 hw_addr參數的格式取決于硬件類，但是對于大多數類，可以假定可以使用通常的表示形式。對于以太網類，這是十六進制的6個字節，用冒號分隔。在添加代理arp條目（即那些設置了publish（“ pub”）標志的條目）時，可以為整個子網指定一個網絡掩碼作為代理arp的做法，但這不是一個好習慣，但較舊的內核支持，因為它很有用。如果沒有提供temp標志，則條目將永久存儲在ARP緩存中。為簡化為您的網絡接口之一設置條目的過程，可以使用“ arp -Ds address ifname”格式。在這種情況下，硬件地址取自具有指定名稱的接口。

選件

-v, --verbose	詳細顯示信息。
-n, --numeric	顯示數字地址，而不是嘗試確定符號主機，端口或用戶名。
-H type, --hw-Type type	設置或讀取ARP緩存時，此可選參數告訴arp它應檢查哪類條目。此參數的默認值是以太（即IEEE 802.3 10Mbps以太網的硬件代碼0x01）。其他值可能包括網絡技術，例如ARCnet（arcnet），PROnet（pronet），AX.25（ax25）和NET / ROM（netrom）。
-a [hostname], --all [hostname]	顯示指定主機的條目。如果不使用hostname參數，將顯示所有條目。主機名將使用替代的BSD樣式輸出格式（無固定列）顯示。
-d hostname, --delete hostname	刪除指定主機的任何條目。例如，如果指定的主機被關閉，則可以使用此功能。
-D, --use-device	給定的參數不是接口hw_addr，而是接口的名稱。 arp將使用該接口的MAC地址作為表條目。通常，這是為您自己設置代理ARP條目的最佳選擇。
-e	以默認（Linux）樣式顯示條目。
-i If, --device If	選擇一個接口。轉儲ARP高速緩存時，將僅打印與指定接口匹配的條目。設置永久或臨時ARP條目時，此接口將與該條目相關聯。如果不使用此選項，內核將根據路由表進行猜測。對于發布條目，指定的接口是將在其上應答ARP請求的接口。注意：這必須與IP數據報將路由到的接口不同。注意：從內核2.2.0開始，不再可以為整個子網設置ARP條目。相反，當路由存在且正在轉發時，Linux會執行自動代理arp。另外，可用于刪除和設置操作的dontpub選項不能與2.4及更高版本的內核一起使用。
-s hostname hw_addr, --set hostname	手動為主機主機名創建ARP地址映射條目，并將其硬件地址設置為hw_addr類，但是對于大多數類，可以假定可以使用通常的表示形式。對于以太網類，這是十六進制的6個字節，用冒號分隔。當添加代理arp條目（即那些設置了發布標志的條目）時，可以為整個子網指定網絡掩碼來代理arp。這不是一個好習慣，但較舊的內核支持，因為它可能有用。如果未提供temp標志，則條目將永久存儲在ARP緩存中。注意：從內核2.2.0開始，不再可以為整個子網設置ARP條目。相反，當路由存在且正在轉發時，Linux會執行自動代理arp。
-f file name, --file file name	與-s選項類似，僅這次是從設置的文件名中獲取地址信息。數據文件的名稱通常是/ etc / ethers，但這不是官方的。如果未指定文件名，則默認使用/ etc / ethers。該文件的格式很簡單；它僅包含帶有主機名的ASCII文本行，以及由空格分隔的硬件地址。此外，可以使用pub，temp和netmask標志。

筆記

在所有需要使用主機名的地方，也可以用點分十進制表示法輸入IP地址。

作為兼容性的一種特殊情況，可以交換主機名和硬件地址的順序。

ARP緩存中的每個完整條目都將帶有C標志。永久條目標有M，發布的條目具有P標志。

arp [-vn] [-H type] [-i if] -a [hostname]

arp [-v] [-i if] -d hostname [pub]

arp [-v] [-H type] [-i if] -s hostname hw_addr [temp]

arp [-v] [-H type] [-i if] -s hostname hw_addr [netmask nm] pub

arp [-v] [-H type] [-i if] -Ds hostname ifa [netmask nm] pub

arp [-vnD] [-H type] [-i if] -f [filename]

Modes

arp with no mode specifier will print the current content of the table. It is possible to limit the number of entries printed, by specifying a hardware address type, interface name or host address.

arp -d address deletes an ARP table entry. Root privilege is required to do this. The entry is found by IP address. If a hostname is given, it will be resolved before looking up the entry in the ARP table.

The command:

arp -s address hw_addr

is used to set up a new table entry. The format of the hw_addr parameter is dependent on the hardware class, but for most classes one can assume that the usual presentation can be used. For the Ethernet class, this is 6 bytes in hexadecimal, separated by colons. When adding proxy arp entries (that is those with the publish ("pub") flag set a netmask may be specified to proxy arp for entire subnets. This is not good practice, but is supported by older kernels because it can be useful. If the temp flag is not supplied entries will be permanent stored into the ARP cache. To simplify setting up entries for one of your network interfaces, you can use the "arp -Ds address ifname" form. In that case the hardware address is taken from the interface with the specified name.

Options

-v, --verbose	Display information verbosely.
-n, --numeric	shows numerical addresses instead of trying to determine symbolic host, port or user names.
-H type, --hw-Type type	When setting or reading the ARP cache, this optional parameter tells arp which class of entries it should check. The default value of this parameter is ether (i.e. hardware code 0x01 for IEEE 802.3 10Mbps Ethernet). Other values might include network technologies such as ARCnet (arcnet) , PROnet (pronet), AX.25 (ax25) and NET/ROM (netrom).
-a [hostname], --all [hostname]	Displays the entries of the specified hosts. If the hostname parameter is not used, all entries will be displayed. Hostnames will be displayed using alternate BSD-style output format (with no fixed columns).
-d hostname, --delete hostname	Remove any entry for the specified host. This can be used if the indicated host is brought down, for example.
-D, --use-device	Instead of a hw_addr, the given argument is the name of an interface. arp will use the MAC address of that interface for the table entry. This is usually the best option to set up a proxy ARP entry to yourself.
-e	Shows entries in default (Linux) style.
-i If, --device If	Select an interface. When dumping the ARP cache, only entries matching the specified interface will be printed. When setting a permanent or temp ARP entry this interface will be associated with the entry; if this option is not used, the kernel will guess based on the routing table. For pub entries, the specified interface is the interface on which ARP requests will be answered. NOTE: This has to be different from the interface to which the IP datagrams will be routed. NOTE: As of kernel 2.2.0 it is no longer possible to set an ARP entry for an entire subnet. Linux instead does automagic proxy arp when a route exists and it is forwarding. Also, the dontpub option that is available for delete and set operations cannot be used with 2.4 and newer kernels.
-s hostname hw_addr, --set hostname	Manually create an ARP address mapping entry for host hostname with hardware address set to hw_addr class, but for most classes one can assume that the usual presentation can be used. For the Ethernet class, this is 6 bytes in hexadecimal, separated by colons. When adding proxy arp entries (that is those with the publish flag set) a netmask may be specified to proxy arp for entire subnets. This is not good practice, but is supported by older kernels because it can be useful. If the temp flag is not supplied entries will be permanent stored into the ARP cache. NOTE: As of kernel 2.2.0 it is no longer possible to set an ARP entry for an entire subnet. Linux instead does automagic proxy arp when a route exists and it is forwarding.
-f file name, --file file name	Similar to the -s option, only this time the address info is taken from file file name set up. The name of the data file is very often /etc/ethers, but this is not official. If no file name is specified /etc/ethers is used as default. The format of the file is simple; it only contains ASCII text lines with a hostname, and a hardware address separated by whitespace. Additionally, the pub, temp and netmask flags can be used.

Notes

In all places where a hostname is expected, one can also enter an IP address in dotted-decimal notation.

As a special case for compatibility, the order of the hostname and the hardware address can be exchanged.

Each complete entry in the ARP cache will be marked with the C flag. Permanent entries are marked with M and published entries have the P flag.

查看英文版

arp 例子

arp

顯示網卡和以太網連接。

arp

Display network card and Ethernet connectivity.

查看英文版

其他命令行

apt-cache | apt-get | ar | arch | as | a2p | aspell | ac | at | awk | adduser | a2p | apropos | alias | agrep | addgroup |

如此好文，分享給朋友