display arp attack

Function

The display arp attack interface command displays ARP attack information on an interface.

Format

display arp attack interface { interface-type interface-num | interface-name } [ vlan-id vlan-number | pe-vid pe-vid ce-vid ce-vid ] [ history ]

display arp attack slot { slotid | all } [ history ]

Parameters

Parameter	Description	Value
interface-type interface-num	Specifies the interface.	-
vlan-id vlan-number	Specifies the VLAN ID.	The value is an integer ranging from 0 to 4094.
pe-vid pe-vid	Specifies the outer VLAN ID.	The value is an integer ranging from 1 to 4094.
ce-vid ce-vid	Specifies an inner VLAN ID.	The value is an integer ranging from 1 to 4094.
history	Indicates the history information about the attacked interface or slot.	-
slotid	Specifies the slot ID of an interface board.	The value is a string of 1 to 32 case-sensitive characters, spaces not supported.
all	Specifies all interface boards.	-

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
hostdefend	read

Usage Guidelines

Usage Scenario

You can check ARP attack information on attacked interfaces by running the display arp attack command. Information on unattacked interfaces is not displayed.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display ARP attack information on GE 0/1/0.

<HUAWEI> display arp attack interface gigabitethernet 0/1/0

The number of ARP attacks is 30. 
-------------------------------------- 
No.1 
Interface Name : GigabitEthernet0/1/0 
Logic interface: GigabitEthernet0/1/0.1 
Vlan-id : 1 
EnableArpCar : 1 (1:Enable 0:Disable) 
Passed : 1714688 Bytes 
12608 Packets 
Dropped : 2456738272 Bytes 
18064252 Packets 

Defend Start Time : 2017-01-11 11:05 
Defend End Time : -- 
-------------------------------------- 
......
--------------------------------------                                          
No.30                                                                           
Interface Name : GigabitEthernet0/1/0                                           
Logic interface: GigabitEthernet0/1/0.1                                         
Vlan-id        : 1                                                              
EnableArpCar   : 1 (1:Enable 0:Disable)                                         
Passed         : 6300356 Bytes                                                  
                 46312 Packets                                                  
Dropped        : 9042546988 Bytes                                               
                 66470246 Packets                                               
                                                                                
Defend  Start Time  : 2017-01-11 11:05                                          
Defend  End   Time  : --                                                        
--------------------------------------

# Display ARP attack information on all interface boards.

<HUAWEI> display arp attack slot all

The number of ARP attacks is 30.                                                
--------------------------------------                                          
No.1                                                                            
Interface Name : GigabitEthernet0/1/0                                           
Logic interface: GigabitEthernet0/1/0.1                                         
Vlan-id        : 30                                                             
EnableArpCar   : 1 (1:Enable 0:Disable)                                         
Passed         : 4086388 Bytes                                                  
                 30030 Packets                                                  
Dropped        : 5862883576 Bytes                                               
                 43086312 Packets                                               
                                                                                
Defend  Start Time  : 2017-01-11 11:05                                          
Defend  End   Time  : --                                                        
--------------------------------------                                          
......                                                       
--------------------------------------                                          
No.30                                                                           
Interface Name : GigabitEthernet0/1/0                                           
Logic interface: GigabitEthernet0/1/0.1                                         
Vlan-id        : 1                                                              
EnableArpCar   : 1 (1:Enable 0:Disable)                                         
Passed         : 4072948 Bytes                                                  
                 29934 Packets                                                  
Dropped        : 5843635500 Bytes                                               
                 42948838 Packets                                               
                                                                                
Defend  Start Time  : 2017-01-11 11:05                                          
Defend  End   Time  : --                                                        
--------------------------------------                                          
Board-based ARP VLAN CAR statistics:                                            
Passed         : 84344640 Bytes                                                 
                 619598 Packets                                                 
Dropped        : 39206700 Bytes                                                 
                 288157 Packets

# Display ARP attack information on slot 1.

<HUAWEI> display arp attack slot 1
The number of ARP attacks is 2. 
No.1: 
Interface Name : GigabitEthernet0/1/0 
Logic interface: GigabitEthernet0/1/0.1
Pe-vid/Ce-vid  : 3 / 4 

EnableArpCar   : 1 (1:enable 0:disable)
Passed         : 453498 Bytes
                 347644 Packets
Dropped        : 756443 Bytes
                 235634 Packets 

Defend Start Time  : 2000 - 06 - 08 17:53
Defend End   Time  : --
----------------------------------------- 
No.2: 
Interface Name : GigabitEthernet0/1/0 
Logic interface: GigabitEthernet0/1/0.1
Vlan-id        : 123 
EnableArpCar   : 1 (1:enable 0:disable)
Passed         : 453498 Bytes
                 347644 Packets
Dropped        : 756443 Bytes
                 235634 Packets 
------------------------------------------------------------------------------ 
Board-based ARP VLAN CAR statistics: 
Passed  : 453498 Bytes
          347644 Packets
Dropped : 756443 Bytes 
          235634 Packets

**Table 1** Description of the **display arp attack** command output
Item	Description
slot	Slot Number.
Interface Name	Name of the ARP attacked interface.
Logic interface	Name of the ARP attacked sub-interface.
EnableArpCar	1: ARP VLAN CAR is enabled. 2: ARP VLAN CAR is disabled.
Passed	Number of bytes and packets that pass through the interface.
Dropped	Number of bytes and packets that discarded on the interface.
Defend Start Time	The start time of the defence.
Defend End Time	The end time of the defence.
Vlan-id	VLAN ID.
No.	Serial number.
Pe-vid	PE Vlan ID.
Ce-vid	CE Vlan ID.