{"id":123238,"date":"2026-11-06T21:49:08","date_gmt":"2026-11-06T13:49:08","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/123238.html"},"modified":"2026-11-06T21:49:08","modified_gmt":"2026-11-06T13:49:08","slug":"%e7%bd%91%e7%bb%9c%e5%8d%8f%e8%ae%ae%e5%ae%89%e5%85%a8%e7%ac%94%e8%ae%b0%ef%bc%88%e4%b8%8a%ef%bc%89%ef%bc%9a%e9%93%be%e8%b7%af%e5%b1%82%e5%88%b0%e4%bc%a0%e8%be%93%e5%b1%82","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/123238.html","title":{"rendered":"\u7f51\u7edc\u534f\u8bae\u5b89\u5168\u7b14\u8bb0\uff08\u4e0a\uff09\uff1a\u94fe\u8def\u5c42\u5230\u4f20\u8f93\u5c42"},"content":{"rendered":"

\/* MD \/ \u5bcc\u6587\u672c\u4e2d\u7684 .toc\uff08\u542b\u535a\u5ba2\u56ed\u642c\u5bb6\u7b49\u5d4c\u5957\u7ed3\u6784\uff09\uff1b.toc-box \u5728\u4fa7\u680f\uff0c\u4e0d\u53d7\u5f71\u54cd *\/
\n #content_views .toc,
\n \/* \u7f16\u8f91\u5668\u5e38\u5728\u76ee\u5f55\u524d\u540e\u63d2\u5165\u7a7a p\uff08:empty \u4ecd\u5360 20px\uff09\uff0c\u4e00\u5e76\u53bb\u6389\u907f\u514d\u9876\u7a7a\u9699 *\/
\n #content_views.markdown_views > p:empty:has(+ .toc),
\n #content_views.markdown_views > .toc + p:empty,
\n \/* \u5bcc\u6587\u672c\u65e7\u7248\u76ee\u5f55\u6807\u8bb0 *\/
\n #content_views.htmledit_views #main-toc,
\n #content_views.htmledit_views #hr-toc,
\n #content_views.htmledit_views p[id*=\\”-toc\\”] {
\n display: none !important;
\n }
\n \/* \u76ee\u5f55\u53bb\u6389\u540e\uff0c\u7d27\u8ddf\u7684\u9996\u4e2a\u6807\u9898\u4e0d\u518d\u591a\u51fa\u4e00\u5757\u4e0a\u8fb9\u8ddd *\/
\n #content_views.markdown_views > .toc + h1,
\n #content_views.markdown_views > .toc + h2,
\n #content_views.markdown_views > .toc + h3,
\n #content_views.markdown_views > .toc + h4,
\n #content_views.markdown_views > .toc + p:empty + h1,
\n #content_views.markdown_views > .toc + p:empty + h2,
\n #content_views.markdown_views > .toc + p:empty + h3,
\n #content_views.markdown_views > .toc + p:empty + h4 {
\n margin-top: 0 !important;
\n }<\/p>\n

\u7f51\u7edc\u534f\u8bae\u5b89\u5168\u7b14\u8bb0（\u4e0a）：\u94fe\u8def\u5c42 \u2192 \u4f20\u8f93\u5c42<\/h2>\n

\u4e00\u53e5\u8bdd\u603b\u7eb2：\u8fd9\u5957\u534f\u8bae\u8bbe\u8ba1\u4e4b\u521d\u53ea\u8ffd\u6c42\u300c\u80fd\u901a\u300d，\u8ba4\u8bc1\u3001\u5b8c\u6574\u6027\u3001\u673a\u5bc6\u6027\u51e0\u4e4e\u6ca1\u5199\u8fdb\u53bb\u3002\u6240\u4ee5\u534f\u8bae\u5b89\u5168\u7684\u672c\u8d28\u5c31\u662f\u5bf9\u7740\u6bcf\u4e2a\u534f\u8bae\u95ee\u4e09\u53e5\u8bdd：\u5b83\u51ed\u4ec0\u4e48\u76f8\u4fe1\u5bf9\u65b9？\u5b83\u62ff\u4ec0\u4e48\u8bc1\u660e\u6570\u636e\u6ca1\u88ab\u6539？\u5b83\u5728\u94fe\u8def\u4e0a\u662f\u660e\u6587\u8fd8\u662f\u5bc6\u6587？<\/p>\n

\u672c\u6587\u6309 \u94fe\u8def\u5c42 \u2192 \u7f51\u7edc\u5c42 \u2192 \u4f20\u8f93\u5c42 \u2192 \u5e94\u7528\u5c42 \u9010\u5c42\u5f80\u4e0b\u8d70，\u6bcf\u4e2a\u534f\u8bae\u56fa\u5b9a\u7528\u540c\u4e00\u4e2a\u6a21\u677f\u62c6，\u6700\u540e\u7edf\u4e00\u6536\u53e3\u5230\u300c\u653b\u51fb\u9762\u603b\u8868 + \u660e\u6587\u53ef\u89c1\u6027 + \u7b80\u7b54\u6a21\u677f\u300d\u3002<\/p>\n

\u26a0\ufe0f \u672c\u6587\u53ea\u8ba8\u8bba\u534f\u8bae\u539f\u7406\u4e0e\u539f\u751f\u8bbe\u8ba1\u7f3a\u9677，\u7528\u4e8e\u5b66\u4e60\u3001\u6392\u969c\u548c\u9632\u5fa1，\u4e0d\u5305\u542b\u53ef\u76f4\u63a5\u8fd0\u884c\u7684\u653b\u51fb\u4ee3\u7801\u3002<\/p>\n

\u672c\u7bc7\u8303\u56f4：0 \u9605\u8bfb\u7ea6\u5b9a\u3001\u4e00 \u603b\u89c8\u3001\u4e8c \u94fe\u8def\u5c42\u3001\u4e09 \u7f51\u7edc\u5c42\u3001\u56db \u4f20\u8f93\u5c42（TCP \/ UDP）\u3002\u5e94\u7528\u5c42\u534f\u8bae\u4e0e\u5b89\u5168\u603b\u7ed3\u653e\u5728\u4e0b\u7bc7\u3002<\/p>\n

0 \u9605\u8bfb\u7ea6\u5b9a<\/h3>\n

0.1 \u6bcf\u4e2a\u534f\u8bae\u7edf\u4e00\u6309\u8fd9\u4e2a\u6a21\u677f\u5199<\/h4>\n\n\u6a21\u677f\u9879\u8981\u56de\u7b54\u7684\u95ee\u9898<\/tr>\n\n\n\n\n\n\n\n
\u540d\u79f0 \/ \u5c42\u7ea7<\/td>\n\u5168\u79f0\u3001\u7f29\u5199\u3001\u5c5e\u4e8e\u54ea\u4e00\u5c42\u3001\u4e0a\u5c42\u534f\u8bae\u53f7\u662f\u591a\u5c11<\/td>\n<\/tr>\n
\u6838\u5fc3\u4f5c\u7528<\/td>\n\u4e00\u53e5\u8bdd\u8bf4\u6e05\u5b83\u89e3\u51b3\u4e86\u4ec0\u4e48\u95ee\u9898（\u4ee5\u53ca\u4e0d\u89e3\u51b3\u4ec0\u4e48）<\/td>\n<\/tr>\n
\u62a5\u6587\u7ed3\u6784<\/td>\n\u9996\u90e8\u5b57\u6bb5\u3001\u957f\u5ea6\u3001\u5173\u952e\u5b57\u6bb5\u7684\u5751<\/td>\n<\/tr>\n
\u7f3a\u9677<\/td>\n\u534f\u8bae\u539f\u751f\u8bbe\u8ba1\u5c31\u7f3a\u7684\u4e1c\u897f（\u4e0d\u662f\u5b9e\u73b0 bug）<\/td>\n<\/tr>\n
\u5229\u7528<\/td>\n\u8fd9\u4e9b\u7f3a\u9677\u88ab\u7ec4\u5408\u6210\u4e86\u54ea\u4e9b\u653b\u51fb<\/td>\n<\/tr>\n
\u9632\u5fa1<\/td>\n\u5728\u54ea\u4e00\u5c42\u80fd\u8865\u4e0a<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

0.2 \u6293\u5305\u73af\u5883\u4e0e\u8bb0\u53f7<\/h4>\n
    \n
  • \u5de5\u5177：Wireshark，\u5f00\u542f \u76f8\u5bf9\u5e8f\u53f7（Relative sequence number），Seq \u4ece 0 \u5f00\u59cb\u663e\u793a，\u4e0d\u662f\u771f\u5b9e\u539f\u59cb\u5e8f\u5217\u53f7\u3002<\/li>\n
  • Len=0 \u8868\u793a TCP \u8f7d\u8377\u4e3a 0，\u662f\u7eaf\u63a7\u5236\u62a5\u6587；Win \u662f\u63a5\u6536\u7a97\u53e3；[PSH, ACK] \u8fd9\u7c7b\u65b9\u62ec\u53f7\u662f Wireshark \u7684\u63a8\u65ad\u6807\u8bb0\u3002<\/li>\n
  • \u300c\u4e00\u4e2a\u4ee5\u592a\u7f51\u5e27 = \u4e00\u4e2a\u4e8c\u5c42\u5305\u300d，\u7edd\u5927\u591a\u6570 DNS \u67e5\u8be2\/\u54cd\u5e94\u5355\u72ec\u5360\u4e00\u4e2a\u5e27\u3002<\/li>\n<\/ul>\n

    \u4e00\u3001\u603b\u89c8<\/h2>\n

    1.1 TCP\/IP \u56db\u5c42 \u2194 OSI \u4e03\u5c42<\/h3>\n\nTCP\/IP \u56db\u5c42\u5bf9\u5e94 OSI \u4e03\u5c42\u5305\u542b\u534f\u8bae（\u52a0\u7c97 = \u672c\u6587\u91cd\u70b9\u62c6\u89e3）<\/tr>\n\n\n\n\n\n
    \u5e94\u7528\u5c42<\/td>\n\u5e94\u7528\u5c42 + \u8868\u793a\u5c42 + \u4f1a\u8bdd\u5c42<\/td>\nHTTP\u3001HTTPS\u3001DNS\u3001TLS\u3001DHCP\u3001SSH\u3001FTP<\/td>\n<\/tr>\n
    \u4f20\u8f93\u5c42<\/td>\n\u4f20\u8f93\u5c42<\/td>\nTCP\u3001UDP<\/td>\n<\/tr>\n
    \u7f51\u7edc\u5c42（\u4e92\u8054\u7f51\u5c42）<\/td>\n\u7f51\u7edc\u5c42<\/td>\nIPv4\u3001ICMP\u3001IGMP\u3001ARP（\u8de8\u4e8c\u4e09\u5c42）<\/td>\n<\/tr>\n
    \u7f51\u7edc\u63a5\u53e3\u5c42（\u94fe\u8def\u5c42）<\/td>\n\u6570\u636e\u94fe\u8def\u5c42 + \u7269\u7406\u5c42<\/td>\n\u4ee5\u592a\u7f51\u3001NDP\u3001WiFi\u3001PPP\u3001VLAN<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u5206\u5c42\u7684\u4e00\u53e5\u8bdd\u8bb0\u5fc6：<\/p>\n

      \n
    • \u94fe\u8def\u5c42\u89e3\u51b3\u300c\u540c\u4e00\u4e2a\u5e7f\u64ad\u57df\u91cc，\u8fd9\u4e00\u5e27\u4ea4\u7ed9\u54ea\u5757\u7f51\u5361\u300d\u2192 MAC \u5730\u5740<\/li>\n
    • \u7f51\u7edc\u5c42\u89e3\u51b3\u300c\u8de8\u7f51\u6bb5，\u8fd9\u4e2a\u5305\u600e\u4e48\u4e00\u8df3\u8df3\u9001\u5230\u300d\u2192 IP \u5730\u5740 + \u8def\u7531<\/li>\n
    • \u4f20\u8f93\u5c42\u89e3\u51b3\u300c\u5230\u4e86\u8fd9\u53f0\u4e3b\u673a，\u4ea4\u7ed9\u54ea\u4e2a\u8fdb\u7a0b\u300d\u2192 \u7aef\u53e3\u53f7<\/li>\n
    • \u5e94\u7528\u5c42\u89e3\u51b3\u300c\u8fd9\u4e2a\u8fdb\u7a0b\u8981\u5e72\u4ec0\u4e48\u300d\u2192 \u4e1a\u52a1\u8bed\u4e49<\/li>\n<\/ul>\n

      1.2 \u5c01\u88c5\u4e0e\u89e3\u5c01\u88c5<\/h3>\n

      \"image-20261104103129670\"<\/p>\n

      \u53d1\u9001\u65b9\u81ea\u4e0a\u800c\u4e0b\u52a0\u5934（\u5c01\u88c5），\u63a5\u6536\u65b9\u81ea\u4e0b\u800c\u4e0a\u5265\u5934（\u89e3\u5c01\u88c5）\u3002\u4e09\u4e2a\u5bb9\u6613\u8bb0\u9519\u7684\u70b9：<\/p>\n

    • \u4ee5\u592a\u7f51\u5934 14B（\u76ee\u7684 MAC 6 + \u6e90 MAC 6 + \u7c7b\u578b 2），\u5c3e\u90e8\u8fd8\u6709 4B FCS，\u4f46 FCS \u4e00\u822c\u4e0d\u88ab Wireshark \u8ba1\u5165\u957f\u5ea6\u3002<\/li>\n
    • MTU = 1500B \u6307\u7684\u662f\u300c\u4ee5\u592a\u7f51\u5934\u4e4b\u540e\u7684\u90e8\u5206\u300d\u6700\u591a 1500 \u5b57\u8282，\u4e5f\u5c31\u662f IP \u5305\u6700\u5927 1500；\u8d85\u8fc7\u5c31\u8981\u5206\u7247\u3002<\/li>\n
    • ping \u4e0d\u7ecf\u8fc7\u4f20\u8f93\u5c42：ICMP \u76f4\u63a5\u88c5\u5728 IP \u91cc，\u6240\u4ee5\u6ca1\u6709\u7aef\u53e3，\u8fd9\u4e5f\u662f\u300cICMP \u6ca1\u6709\u7aef\u53e3\u300d\u7684\u51c6\u786e\u539f\u56e0\u3002<\/li>\n

      1.3 \u4e00\u6b21\u300c\u6253\u5f00\u7f51\u9875\u300d\u5230\u5e95\u7528\u4e86\u591a\u5c11\u534f\u8bae<\/h3>\n\n\u987a\u5e8f\u52a8\u4f5c\u7528\u5230\u7684\u534f\u8bae\u5173\u952e\u70b9<\/tr>\n\n\n\n\n\n\n\n\n
      1<\/td>\n\u62ff\u5230\u672c\u673a IP<\/td>\nDHCP（UDP 67\/68）\u6216\u9759\u6001\u914d\u7f6e<\/td>\nDHCP \u65e0\u8ba4\u8bc1 \u2192 \u53ef\u88ab\u4f2a\u9020\u670d\u52a1\u5668\u52ab\u6301<\/td>\n<\/tr>\n
      2<\/td>\n\u57df\u540d\u6362 IP<\/td>\nDNS（UDP 53，\u5fc5\u8981\u65f6 TCP 53）<\/td>\n\u65e0\u8ba4\u8bc1 \u2192 \u7f13\u5b58\u6295\u6bd2\u3001\u653e\u5927\u653b\u51fb<\/td>\n<\/tr>\n
      3<\/td>\n\u67e5\u7f51\u5173 MAC<\/td>\nARP（\u4ee5\u592a\u7f51 0x0806）<\/td>\n\u65e0\u8ba4\u8bc1 \u2192 ARP \u6b3a\u9a97\u3001\u4e2d\u95f4\u4eba<\/td>\n<\/tr>\n
      4<\/td>\n\u4e0e\u670d\u52a1\u5668\u5efa\u8fde<\/td>\nTCP \u4e09\u6b21\u63e1\u624b<\/td>\n\u534a\u8fde\u63a5\u961f\u5217\u6709\u9650 \u2192 SYN Flood<\/td>\n<\/tr>\n
      5<\/td>\n\u534f\u5546\u52a0\u5bc6<\/td>\nTLS \u63e1\u624b（\u8bc1\u4e66 + \u5bc6\u94a5\u4ea4\u6362）<\/td>\n\u8bc1\u4e66\u4fe1\u4efb\u94fe\u662f\u552f\u4e00\u8eab\u4efd\u4f9d\u636e<\/td>\n<\/tr>\n
      6<\/td>\n\u53d1\u8bf7\u6c42<\/td>\nHTTP over TLS<\/td>\n\u660e\u6587 HTTP \u2192 \u4e2d\u95f4\u4eba\u76f4\u63a5\u8bfb<\/td>\n<\/tr>\n
      7<\/td>\n\u4f20\u8f93\u4e2d\u9014<\/td>\nIP \u8def\u7531\u3001TTL \u9012\u51cf\u3001\u53ef\u80fd\u5206\u7247<\/td>\n\u6e90 IP \u53ef\u4f2a\u9020\u3001\u5206\u7247\u53ef\u653b\u51fb<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      1.4 \u5168\u6587\u5730\u56fe<\/h3>\n\n\u7ae0\u5c42\u534f\u8bae\u4e00\u53e5\u8bdd\u7f3a\u9677<\/tr>\n\n\n\n\n\n\n\n\n\n\n
      \u4e8c<\/td>\n\u94fe\u8def\u5c42<\/td>\n\u4ee5\u592a\u7f51<\/td>\nMAC \u53ef\u4f2a\u9020，\u4ea4\u6362\u673a\u53ea\u8ba4\u5730\u5740\u4e0d\u8ba4\u4eba<\/td>\n<\/tr>\n
      \u4e8c<\/td>\n\u94fe\u8def\u5c42<\/td>\nARP<\/td>\n\u6536\u5230\u5e94\u7b54\u5c31\u91c7\u4fe1，\u65e0\u8ba4\u8bc1<\/td>\n<\/tr>\n
      \u4e09<\/td>\n\u7f51\u7edc\u5c42<\/td>\nIPv4<\/td>\n\u6e90 IP \u53ef\u968f\u4fbf\u586b，\u53ea\u6821\u9a8c\u9996\u90e8<\/td>\n<\/tr>\n
      \u4e09<\/td>\n\u7f51\u7edc\u5c42<\/td>\nICMP<\/td>\n\u8c01\u90fd\u80fd\u53d1，\u65e9\u671f\u7f51\u7edc\u8fd8\u90fd\u653e\u884c<\/td>\n<\/tr>\n
      \u56db<\/td>\n\u4f20\u8f93\u5c42<\/td>\nTCP<\/td>\n\u63e1\u624b\u8017\u8d44\u6e90，\u8001\u7cfb\u7edf\u5e8f\u53f7\u53ef\u9884\u6d4b<\/td>\n<\/tr>\n
      \u56db<\/td>\n\u4f20\u8f93\u5c42<\/td>\nUDP<\/td>\n\u65e0\u8fde\u63a5\u65e0\u72b6\u6001 \u2192 \u6e90 IP \u4f2a\u9020\u96f6\u6210\u672c，\u5929\u7136\u9002\u5408\u53cd\u5c04\u653e\u5927<\/td>\n<\/tr>\n
      \u4e94<\/td>\n\u5e94\u7528\u5c42<\/td>\nHTTP<\/td>\n\u5168\u660e\u6587，\u4e0d\u9632\u7be1\u6539<\/td>\n<\/tr>\n
      \u4e94<\/td>\n\u5e94\u7528\u5c42<\/td>\nDNS<\/td>\n\u539f\u59cb\u7248\u672c\u65e0\u8ba4\u8bc1\u3001\u660e\u6587\u3001UDP<\/td>\n<\/tr>\n
      \u4e94<\/td>\n\u5e94\u7528\u5c42<\/td>\nTLS\/HTTPS<\/td>\n\u65e7\u7248\u672c\u6f0f\u6d1e\u3001\u8bc1\u4e66\u4fe1\u4efb\u4f53\u7cfb\u3001SNI \u660e\u6587<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
      \n

      \u4e8c\u3001\u94fe\u8def\u5c42<\/h2>\n

      \u8fd9\u4e00\u5c42\u7684\u4e00\u53e5\u8bdd：\u5c40\u57df\u7f51\u91cc\u6ca1\u6709\u300c\u8eab\u4efd\u300d，\u53ea\u6709\u300c\u5730\u5740\u300d\u3002\u8c01\u62a5\u51fa\u81ea\u5df1\u7684 MAC，\u4ea4\u6362\u673a\u5c31\u7167\u7740\u8f6c\u53d1 \u2014\u2014 \u8fd9\u5c31\u662f\u540e\u9762\u6240\u6709\u4e8c\u5c42\u6b3a\u9a97\u7684\u6839\u3002<\/p>\n

      2.1 \u4ee5\u592a\u7f51（Ethernet）<\/h3>\n

      \u6838\u5fc3\u4f5c\u7528：\u5728\u540c\u4e00\u4e2a\u5e7f\u64ad\u57df\u5185，\u7528 MAC \u5730\u5740\u628a\u6570\u636e\u5e27\u4ece\u4e00\u5757\u7f51\u5361\u9001\u5230\u53e6\u4e00\u5757\u7f51\u5361\u3002\u5b83\u53ea\u7ba1\u300c\u8fd9\u4e00\u8df3\u300d，\u4e0d\u7ba1\u8de8\u7f51\u6bb5\u3002<\/p>\n

      EtherType \u5b57\u6bb5（\u4ee5\u592a\u7f51\u5934\u6700\u540e 2 \u5b57\u8282，\u7528\u6765\u544a\u8bc9\u4e0a\u5c42\u300c\u6211\u88c5\u7684\u662f\u4ec0\u4e48\u300d）：<\/p>\n\nEtherType\u542b\u4e49<\/tr>\n\n\n\n\n\n\n\n\n\n
      0x0800<\/td>\nIPv4（\u6700\u5e38\u7528，ping\u3001TCP\u3001UDP \u90fd\u88c5\u5728\u8fd9\u4e2a\u91cc\u9762）<\/td>\n<\/tr>\n
      0x0806<\/td>\nARP<\/td>\n<\/tr>\n
      0x8035<\/td>\nRARP（\u53cd\u5411 ARP，\u73b0\u5728\u51e0\u4e4e\u6dd8\u6c70）<\/td>\n<\/tr>\n
      0x8100<\/td>\n802.1Q VLAN \u6807\u7b7e\u5e27（\u5e26 VLAN）<\/td>\n<\/tr>\n
      0x86DD<\/td>\nIPv6<\/td>\n<\/tr>\n
      0x8863<\/td>\nPPPoE Discovery（\u62e8\u53f7\u53d1\u73b0）<\/td>\n<\/tr>\n
      0x8864<\/td>\nPPPoE Session（\u62e8\u53f7\u6570\u636e）<\/td>\n<\/tr>\n
      0x8809<\/td>\nLACP \u94fe\u8def\u805a\u5408\u534f\u8bae<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      \u4e24\u79cd\u5e27\u683c\u5f0f：<\/p>\n

      \u73b0\u4ee3 Ethernet II（DIX）：
      \n\u76ee\u7684MAC(6B) | \u6e90MAC(6B) | EtherType(2B) | \u8f7d\u8377(46~1500B) | FCS\u6821\u9a8c(4B)<\/p>\n

      \u8001\u5f0f IEEE 802.3：
      \n\u76ee\u7684MAC(6B) | \u6e90MAC(6B) | \u957f\u5ea6(2B) | LLC\u5934 | \u8f7d\u8377 | FCS(4B)<\/p>\n

      \u533a\u5206\u65b9\u6cd5：\u7b2c 13\u300114 \u5b57\u8282 \u2265 0x0600 \u2192 \u662f EtherType（Ethernet II）；
      \n \u2264 0x05DC（1500）\u2192 \u662f\u957f\u5ea6\u5b57\u6bb5（802.3）
      \n\u8f7d\u8377\u6700\u5c0f 46B：\u4e0d\u591f\u8981\u586b\u5145（padding），\u5426\u5219\u8fde 64B \u6700\u5c0f\u5e27\u90fd\u51d1\u4e0d\u9f50<\/p>\n

      \u7f3a\u9677<\/h4>\n
    • \u65e0\u8eab\u4efd\u8ba4\u8bc1：\u6e90 MAC \u5b8c\u5168\u7531\u53d1\u9001\u65b9\u81ea\u5df1\u586b，\u7f51\u5361\u300c\u6df7\u6742\u6a21\u5f0f\u300d\u4e0b\u8fd8\u80fd\u6536\u5230\u4e0d\u662f\u53d1\u7ed9\u81ea\u5df1\u7684\u5e27\u3002<\/li>\n
    • \u4ea4\u6362\u673a\u53ea\u5b66\u5730\u5740\u3001\u4e0d\u9a8c\u8bc1：\u6e90 MAC \u51fa\u73b0\u5728\u54ea\u4e2a\u53e3，\u5c31\u628a\u8be5 MAC \u8bb0\u5230\u54ea\u4e2a\u53e3\u3002<\/li>\n
    • \u5e7f\u64ad\u57df\u662f\u5171\u4eab\u7684：\u540c\u4e00\u4e2a VLAN \u5185\u6240\u6709\u4e3b\u673a\u90fd\u80fd\u6536\u5230\u5e7f\u64ad\u5e27（ARP\u3001DHCP \u90fd\u9760\u5e7f\u64ad）\u3002<\/li>\n
    • VLAN \u53ea\u662f\u903b\u8f91\u9694\u79bb，\u914d\u7f6e\u9519\u8bef\u6216 VLAN \u8df3\u8dc3（\u53cc\u91cd\u6807\u7b7e）\u5c31\u80fd\u8de8\u57df\u3002<\/li>\n

      \u5229\u7528<\/h4>\n
    • MAC \u6cdb\u6d2a（MAC Flooding）：\u704c\u6ee1\u4ea4\u6362\u673a CAM \u8868，\u4ea4\u6362\u673a\u9000\u5316\u6210\u96c6\u7ebf\u5668，\u5f00\u59cb\u6cdb\u6d2a\u6240\u6709\u5e27 \u2192 \u653b\u51fb\u8005\u53ef\u65c1\u542c\u3002<\/li>\n
    • MAC \u6b3a\u9a97：\u628a\u6e90 MAC \u6539\u6210\u7f51\u5173\u7684 MAC，\u62a2\u6d41\u91cf\u3002<\/li>\n
    • VLAN \u8df3\u8dc3（VLAN Hopping）：\u53cc\u91cd 802.1Q \u6807\u7b7e \/ \u4ea4\u6362\u673a\u95f4 trunk \u534f\u5546\u6b3a\u9a97，\u8de8 VLAN \u8bbf\u95ee\u3002<\/li>\n
    • \u4ea4\u6362\u673a STP \u653b\u51fb：\u4f2a\u9020 BPDU \u62a2\u6839\u6865，\u628a\u6d41\u91cf\u5f15\u5230\u81ea\u5df1\u8eab\u4e0a\u3002<\/li>\n

      \u9632\u5fa1：\u7aef\u53e3\u5b89\u5168（\u9650\u5236\u6bcf\u53e3 MAC \u6570\u91cf）\u3001DAI（\u52a8\u6001 ARP \u68c0\u6d4b）\u3001DHCP Snooping\u3001\u7981\u7528\u672a\u4f7f\u7528\u7aef\u53e3\u3001\u663e\u5f0f\u914d\u7f6e trunk\u3001BPDU Guard\u3002<\/p>\n

      2.2 ARP（Address Resolution Protocol，\u5730\u5740\u89e3\u6790\u534f\u8bae）<\/h3>\n

      \u5c42\u7ea7：\u4ecb\u4e8e\u7f51\u7edc\u5c42\u4e0e\u94fe\u8def\u5c42\u4e4b\u95f4，\u5c01\u88c5\u5728\u4ee5\u592a\u7f51\u5e27\u91cc，EtherType = 0x0806\u3002<\/p>\n

      \u9002\u7528\u8303\u56f4：\u53ea\u5728\u540c\u4e00\u4e2a\u5e7f\u64ad\u57df（\u540c\u4e00\u4e2a\u5b50\u7f51）\u751f\u6548\u3002IPv4 \u5c40\u57df\u7f51\u4e13\u7528；IPv6 \u629b\u5f03\u4e86 ARP，\u6539\u7528 NDP（\u90bb\u5c45\u53d1\u73b0\u534f\u8bae）\u3002<\/p>\n

      \u6838\u5fc3\u4f5c\u7528：\u5df2\u77e5\u76ee\u6807 IP，\u67e5\u8be2\u5bf9\u5e94\u7684 MAC \u5730\u5740\u3002\u53cd\u8fc7\u6765（\u5df2\u77e5 MAC \u67e5 IP）\u53eb RARP，\u5df2\u6dd8\u6c70\u3002<\/p>\n

      \u62a5\u6587\u7ed3\u6784（28 \u5b57\u8282，\u56fa\u5b9a）：<\/p>\n\n\u5b57\u6bb5\u957f\u5ea6\u5178\u578b\u503c\u8bf4\u660e<\/tr>\n\n\n\n\n\n\n\n\n\n\n
      \u786c\u4ef6\u7c7b\u578b<\/td>\n2B<\/td>\n1<\/td>\n\u4ee5\u592a\u7f51<\/td>\n<\/tr>\n
      \u534f\u8bae\u7c7b\u578b<\/td>\n2B<\/td>\n0x0800<\/td>\n\u4e0a\u5c42\u662f IPv4<\/td>\n<\/tr>\n
      \u786c\u4ef6\u5730\u5740\u957f\u5ea6<\/td>\n1B<\/td>\n6<\/td>\nMAC 6 \u5b57\u8282<\/td>\n<\/tr>\n
      \u534f\u8bae\u5730\u5740\u957f\u5ea6<\/td>\n1B<\/td>\n4<\/td>\nIPv4 4 \u5b57\u8282<\/td>\n<\/tr>\n
      \u64cd\u4f5c\u7801<\/td>\n2B<\/td>\n1 = \u8bf7\u6c42 \/ 2 = \u5e94\u7b54<\/td>\n<\/td>\n<\/tr>\n
      \u53d1\u9001\u65b9 MAC<\/td>\n6B<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
      \u53d1\u9001\u65b9 IP<\/td>\n4B<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
      \u76ee\u6807 MAC<\/td>\n6B<\/td>\n\u8bf7\u6c42\u65f6\u5168 0<\/td>\n<\/td>\n<\/tr>\n
      \u76ee\u6807 IP<\/td>\n4B<\/td>\n<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      \u5de5\u4f5c\u8fc7\u7a0b：<\/p>\n

    • \u4e3b\u673a\u8981\u53d1\u7ed9 192.168.1.1，\u5148\u67e5\u672c\u673a ARP \u7f13\u5b58（arp -a）；<\/li>\n
    • \u6ca1\u6709 \u2192 \u53d1 ARP \u8bf7\u6c42（\u5e7f\u64ad，\u76ee\u7684 MAC \u5168 F），\u5185\u5bb9：\u300c\u8c01\u662f 192.168.1.1？\u8bf7\u544a\u8bc9 192.168.1.59\u300d；<\/li>\n
    • \u76ee\u6807\u4e3b\u673a\u56de ARP \u5e94\u7b54（\u5355\u64ad）：\u300c\u6211\u662f，\u6211\u7684 MAC \u662f XX\u300d；<\/li>\n
    • \u53cc\u65b9\u90fd\u5199\u5165\u7f13\u5b58，\u7f13\u5b58\u6709\u8001\u5316\u65f6\u95f4（Windows \u7ea6\u51e0\u5341\u79d2\u5230\u51e0\u5206\u949f）\u3002<\/li>\n

      \u8865\u5145：\u514d\u8d39 ARP（Gratuitous ARP） \u2014\u2014 \u4e3b\u673a\u4e3b\u52a8\u5e7f\u64ad\u300c\u6211\u7684 IP \u5bf9\u5e94\u6211\u7684 MAC\u300d，\u7528\u4e8e IP \u51b2\u7a81\u68c0\u6d4b\u548c\u300c\u6211\u6362\u4e86\u7f51\u5361，\u5927\u5bb6\u66f4\u65b0\u4e00\u4e0b\u300d\u3002\u8fd9\u4e00\u673a\u5236\u672c\u8eab\u4e5f\u5e38\u88ab\u653b\u51fb\u8005\u7528\u6765\u4e3b\u52a8\u5237\u65b0\u522b\u4eba\u7684\u7f13\u5b58\u3002<\/p>\n

      \u5b9e\u62cd：\u4e00\u6b21 ARP \u8bf7\u6c42 + \u5e94\u7b54（ping 10.41.231.140 \u89e6\u53d1，\u8fc7\u6ee4\u5668 arp）<\/p>\n

      \"image-20261104112411313\"<\/p>\n

        \n
      • \u7b2c 1 \u6761 Who has 10.41.231.140? Tell 10.41.231.117：\u76ee\u7684 MAC \u662f ff:ff:ff:ff:ff:ff（\u5e7f\u64ad），Target MAC \u5168 0（\u8fd8\u4e0d\u77e5\u9053）；<\/li>\n
      • \u7b2c 2 \u6761 10.41.231.140 is at 82:48:ed:2e:cd:4a：\u5355\u64ad\u56de\u5230\u6211\u7684 MAC，Opcode = reply (2)；<\/li>\n
      • \u4e0b\u65b9\u9762\u677f\u91cc Sender IP 10.41.231.117 \/ Target IP 10.41.231.140 \u5c31\u662f\u8fd9\u6b21\u300cIP \u6362 MAC\u300d\u7684\u5168\u90e8\u5185\u5bb9 \u2014\u2014 \u6ca1\u6709\u7b7e\u540d，\u6ca1\u6709\u6821\u9a8c，\u4e5f\u6ca1\u6709\u300c\u6211\u6ca1\u95ee\u8fc7\u4f60\u522b\u7b54\u300d\u3002\u8fd9\u5c31\u662f ARP \u6b3a\u9a97\u7684\u5165\u53e3\u3002<\/li>\n<\/ul>\n

        \u7f3a\u9677<\/h4>\n

        ARP \u534f\u8bae\u65e0\u8eab\u4efd\u8ba4\u8bc1\u3001\u65e0\u6821\u9a8c，\u4e3b\u673a\u6536\u5230 ARP \u5e94\u7b54\u5c31\u76f4\u63a5\u66f4\u65b0\u672c\u673a ARP \u7f13\u5b58，\u4e0d\u9a8c\u8bc1\u8fd9\u4e2a\u5e94\u7b54\u662f\u4e0d\u662f\u771f\u7684\u76ee\u6807\u4e3b\u673a\u53d1\u7684，\u4e5f\u4e0d\u8981\u6c42\u300c\u6211\u6ca1\u95ee\u8fc7\u4f60\u5c31\u522b\u7b54\u300d\u3002<\/p>\n

        \u5229\u7528：ARP \u6b3a\u9a97（ARP \u4e2d\u6bd2）<\/h4>\n

        \u653b\u51fb\u8005\u53d1\u9001\u4f2a\u9020 ARP \u5e94\u7b54：\u544a\u8bc9\u53d7\u5bb3\u8005\u300c\u7f51\u5173 IP \u7684 MAC \u662f\u6211\u300d，\u540c\u65f6\u544a\u8bc9\u7f51\u5173\u300c\u53d7\u5bb3\u8005 IP \u7684 MAC \u662f\u6211\u300d\u3002\u4e24\u4e2a\u65b9\u5411\u7684\u6d41\u91cf\u90fd\u7ecf\u8fc7\u653b\u51fb\u8005\u4e3b\u673a，\u5b9e\u73b0\u4e2d\u95f4\u4eba：\u6293 HTTP \u660e\u6587\u3001\u7be1\u6539\u7f51\u9875\u3001\u76f4\u63a5\u65ad\u7f51\u3002<\/p>\n

        \"image-20261104103151952\"<\/p>\n

        \u914d\u5957\u7684\u4e24\u4e2a\u53d8\u79cd：<\/p>\n

          \n
        • ARP \u626b\u63cf：\u904d\u5386\u7f51\u6bb5\u53d1 ARP \u8bf7\u6c42，\u5feb\u901f\u53d1\u73b0\u5b58\u6d3b\u4e3b\u673a（\u6bd4 IP \u626b\u63cf\u66f4\u53ef\u9760，\u56e0\u4e3a ARP \u4e0d\u8fc7\u8def\u7531\u5668）\u3002<\/li>\n
        • ARP \u8868\u6ea2\u51fa：\u704c\u6ee1\u4e3b\u673a\/\u4ea4\u6362\u673a ARP \u8868，\u8ba9\u6b63\u5e38\u6620\u5c04\u88ab\u6324\u6389，\u88ab\u8feb\u91cd\u65b0\u5e7f\u64ad \u2192 \u914d\u5408\u4f2a\u9020\u5e94\u7b54\u62a2\u5360\u3002<\/li>\n<\/ul>\n

          \u9632\u5fa1：\u9759\u6001 ARP \u7ed1\u5b9a（arp -s）\u3001ARP \u9632\u706b\u5899\u3001DAI（\u52a8\u6001 ARP \u68c0\u6d4b，\u4ea4\u6362\u673a\u5c42\u9762）\u3001\u5212\u5206 VLAN \u7f29\u5c0f\u5e7f\u64ad\u57df\u3001\u91cd\u8981\u670d\u52a1\u5668\u7528\u9759\u6001\u6620\u5c04\u3002<\/p>\n

          DAI \u7684\u524d\u63d0\u662f DHCP Snooping：\u4ea4\u6362\u673a\u8981\u5148\u77e5\u9053\u300c\u8fd9\u4e2a\u53e3\u5408\u6cd5\u7684 IP-MAC \u662f\u8c01\u300d，\u624d\u80fd\u5224\u65ad ARP \u5e94\u7b54\u771f\u5047 \u2014\u2014 \u8fd9\u662f\u914d\u7f6e\u9898\u91cc\u5e38\u8003\u7684\u4f9d\u8d56\u5173\u7cfb\u3002<\/p>\n

          2.3 \u8865\u5145：IPv6 \u7684 NDP（\u4e00\u53e5\u8bdd）<\/h3>\n

          IPv6 \u7528 NDP（Neighbor Discovery Protocol） \u53d6\u4ee3 ARP，\u9760 ICMPv6 \u7684 NS\/NA（\u90bb\u5c45\u8bf7\u6c42\/\u901a\u544a，Type 133\/135\/136） \u5b9e\u73b0\u5730\u5740\u89e3\u6790，\u53e6\u5916\u8fd8\u6709 RS\/RA（\u8def\u7531\u5668\u8bf7\u6c42\/\u901a\u544a，Type 133\/134）\u505a SLAAC \u81ea\u52a8\u914d\u7f6e\u3002<\/p>\n

          \u5b89\u5168\u6027\u540c\u6837\u7684\u5751：NDP \u4e5f\u6ca1\u6709\u8ba4\u8bc1 \u2192 NS\/NA \u6b3a\u9a97（NDP \u6b3a\u9a97）= IPv6 \u7248 ARP \u6b3a\u9a97，\u9632\u5fa1\u662f RA Guard \/ ND Guard\u3002<\/p>\n

          2.4 \u8865\u5145：VLAN（\u4e00\u53e5\u8bdd）<\/h3>\n

          VLAN \u5728\u4ee5\u592a\u7f51\u5e27\u91cc\u63d2 4 \u5b57\u8282 802.1Q \u6807\u7b7e（EtherType 0x8100，\u91cc\u9762 12 \u4f4d VID \u8868\u793a 1~4094），\u628a\u4e00\u53f0\u4ea4\u6362\u673a\u7684\u7aef\u53e3\u903b\u8f91\u5207\u6210\u591a\u4e2a\u5e7f\u64ad\u57df\u3002<\/p>\n

          \u5b89\u5168\u542b\u4e49：VLAN \u4e0d\u662f\u5b89\u5168\u8fb9\u754c（\u5f88\u591a\u4eba\u8bef\u4ee5\u4e3a\u662f）\u3002\u8de8 VLAN \u5fc5\u987b\u8fc7\u4e09\u5c42\u8bbe\u5907，\u8fd9\u65f6\u5019\u9632\u706b\u5899\/ACL \u624d\u771f\u6b63\u8d77\u4f5c\u7528\u3002<\/p>\n

          \n

          \u4e09\u3001\u7f51\u7edc\u5c42<\/h2>\n

          \u8fd9\u4e00\u5c42\u7684\u4e00\u53e5\u8bdd：IP \u53ea\u8d1f\u8d23\u300c\u5c3d\u6700\u5927\u52aa\u529b\u628a\u5305\u9001\u5230\u300d，\u6240\u4ee5\u5b83\u4e0d\u4fdd\u8bc1\u9001\u5230\u3001\u4e0d\u4fdd\u8bc1\u987a\u5e8f\u3001\u4e0d\u4fdd\u8bc1\u4e0d\u91cd\u590d\u3001\u4e0d\u4fdd\u8bc1\u5b8c\u6574\u3002\u8fd9\u4e9b\u5751\u5168\u90e8\u7559\u7ed9\u4e0a\u5c42\u53bb\u8865\u3002<\/p>\n

          3.1 IP（Internet Protocol，\u7f51\u9645\u534f\u8bae）<\/h3>\n

          \u6838\u5fc3\u4f5c\u7528：\u5bfb\u5740 + \u8def\u7531，\u5b8c\u6210\u300c\u4e3b\u673a\u5230\u4e3b\u673a\u300d\u7684\u4efb\u52a1\u3002<\/p>\n

          \u9996\u90e8\u7ed3\u6784（\u56fa\u5b9a 20 \u5b57\u8282 + \u53ef\u53d8\u9009\u9879）：<\/p>\n

          \"image-20261104103205042\"<\/p>\n

          \u5b9e\u9645\u6293\u5305\u5bf9\u7167（ping 223.5.5.5）：<\/p>\n

          \"ping<\/p>\n

          \u5fc5\u987b\u8bb0\u7262\u7684\u5b57\u6bb5：<\/p>\n\n\u5b57\u6bb5\u957f\u5ea6\u4e3a\u4ec0\u4e48\u91cd\u8981<\/tr>\n\n\n\n\n\n\n\n\n
          \u7248\u672c + \u9996\u90e8\u957f\u5ea6<\/td>\n4 + 4 \u4f4d<\/td>\nIHL \u4ee5 4 \u5b57\u8282\u4e3a\u5355\u4f4d，5 \u2192 20 \u5b57\u8282<\/td>\n<\/tr>\n
          \u603b\u957f\u5ea6<\/td>\n16 \u4f4d<\/td>\n\u9996\u90e8 + \u6570\u636e，\u6700\u5927 65535；\u6293\u5305\u91cc\u7684 Total Length<\/td>\n<\/tr>\n
          \u6807\u8bc6 \/ \u6807\u5fd7 \/ \u7247\u504f\u79fb<\/td>\n16 \/ 3 \/ 13 \u4f4d<\/td>\n\u5206\u7247\u4e09\u4ef6\u5957：\u540c\u4e00 ID \u5c5e\u4e8e\u540c\u4e00\u4e2a\u539f\u59cb\u5305，MF \u8868\u793a\u300c\u540e\u9762\u8fd8\u6709\u300d，\u7247\u504f\u79fb \u00d78 \u8868\u793a\u4f4d\u7f6e<\/td>\n<\/tr>\n
          TTL<\/td>\n8 \u4f4d<\/td>\n\u6bcf\u8fc7\u4e00\u4e2a\u8def\u7531\u5668\u51cf 1，\u51cf\u5230 0 \u5c31\u4e22\u5f03\u5e76\u56de ICMP \u8d85\u65f6 \u2192 \u8fd9\u5c31\u662f traceroute \u7684\u539f\u7406<\/td>\n<\/tr>\n
          \u534f\u8bae\u53f7<\/td>\n8 \u4f4d<\/td>\n\u544a\u8bc9 IP\u300c\u91cc\u9762\u88c5\u7684\u662f\u8c01\u300d，\u89c1\u4e0b\u8868<\/td>\n<\/tr>\n
          \u9996\u90e8\u6821\u9a8c\u548c<\/td>\n16 \u4f4d<\/td>\n\u53ea\u6821\u9a8c\u9996\u90e8，\u4e0d\u6821\u9a8c\u6570\u636e<\/td>\n<\/tr>\n
          \u6e90\/\u76ee\u7684 IP<\/td>\n\u5404 32 \u4f4d<\/td>\n\u6e90 IP \u7531\u53d1\u9001\u65b9\u81ea\u5df1\u586b \u2192 \u53ef\u4f2a\u9020<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          \u5e38\u89c1\u534f\u8bae\u53f7：<\/p>\n\n\u534f\u8bae\u53f7\u534f\u8bae\u534f\u8bae\u53f7\u534f\u8bae<\/tr>\n\n\n\n\n\n\n
          1<\/td>\nICMP<\/td>\n47<\/td>\nGRE（\u96a7\u9053）<\/td>\n<\/tr>\n
          2<\/td>\nIGMP<\/td>\n50<\/td>\nESP（IPSec \u52a0\u5bc6\u8f7d\u8377）<\/td>\n<\/tr>\n
          6<\/td>\nTCP<\/td>\n51<\/td>\nAH（IPSec \u8ba4\u8bc1\u5934）<\/td>\n<\/tr>\n
          17<\/td>\nUDP<\/td>\n89<\/td>\nOSPF<\/td>\n<\/tr>\n
          41<\/td>\nIPv6（6in4 \u96a7\u9053）<\/td>\n132<\/td>\nSCTP<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          \u5206\u7247\u4e0e MTU：<\/p>\n

            \n
          • \u4ee5\u592a\u7f51 MTU = 1500，IP \u5305\u8d85\u8fc7\u5c31\u8981\u5206\u7247；\u5206\u7247\u53ef\u4ee5\u53d1\u751f\u5728\u6e90\u4e3b\u673a，\u4e5f\u53ef\u4ee5\u53d1\u751f\u5728\u4e2d\u9014\u8def\u7531\u5668\u3002<\/li>\n
          • \u63a5\u6536\u65b9\u9760\u300c\u6807\u8bc6 + \u7247\u504f\u79fb + MF\u300d\u91cd\u7ec4，\u4efb\u4e00\u5206\u7247\u4e22\u5931 \u2192 \u6574\u4e2a\u539f\u59cb\u5305\u4e22\u5f03\u3002<\/li>\n
          • DF=1（\u7981\u6b62\u5206\u7247） \u65f6，\u5982\u679c\u8def\u4e0a MTU \u592a\u5c0f，\u8def\u7531\u5668\u56de ICMP Type 3 Code 4（\u9700\u8981\u5206\u7247），\u6e90\u4e3b\u673a\u636e\u6b64\u8c03\u5c0f \u2014\u2014 \u8fd9\u5c31\u662f PMTUD（\u8def\u5f84 MTU \u53d1\u73b0）\u3002<\/li>\n
          • \u73b0\u5b9e\u4e2d\u7684\u5751：ICMP \u88ab\u9632\u706b\u5899\u5168\u7981 \u2192 PMTUD \u5931\u6548 \u2192 \u5927\u5305\u53d1\u4e0d\u51fa\u53bb\u3001\u5c0f\u5305\u6b63\u5e38，\u8868\u73b0\u4e3a\u300c\u7f51\u9875\u80fd\u5f00\u4f46\u56fe\u7247\u52a0\u8f7d\u5361\u6b7b\u300d\u3002\u8fd9\u662f\u8fd0\u7ef4\u9ad8\u9891\u6545\u969c，\u4e5f\u662f\u8003\u8bd5\u7231\u95ee\u7684\u70b9\u3002<\/li>\n<\/ul>\n

            \u5b9e\u62cd：ping -l 3000 \u88ab\u62c6\u6210 3 \u4e2a\u5206\u7247（\u8fc7\u6ee4\u5668 ip.flags.mf == 1 or ip.frag_offset > 0）<\/p>\n

            \"image-20261104112358749\"<\/p>\n

            \u4e09\u6761\u8bb0\u5f55\u7684 Identification \u5168\u662f 0x9592（\u8868\u793a\u300c\u6211\u4eec\u5c5e\u4e8e\u540c\u4e00\u4e2a\u539f\u59cb\u5305\u300d），Fragment Offset \u4f9d\u6b21\u662f 0 \/ 1480 \/ 2960 \u5b57\u8282，\u524d\u4e24\u6761 More fragments = 1\u3001\u6700\u540e\u4e00\u6761\u4e3a 0；\u7b2c 1\u30012 \u6761\u88ab\u6807\u6210 [Reassembled in #3]，\u8bf4\u660e\u91cd\u7ec4\u662f\u5728\u63a5\u6536\u7aef\u5b8c\u6210\u7684，\u4e2d\u95f4\u8def\u7531\u5668\u53ea\u8d1f\u8d23\u8f6c\u53d1\u788e\u7247\u3002<\/p>\n

            \u7f3a\u9677<\/h4>\n
          • \u65e0\u8eab\u4efd\u8ba4\u8bc1：\u6e90 IP \u53ef\u4ee5\u968f\u4fbf\u586b（IP \u5730\u5740\u4f2a\u9020）\u3002<\/li>\n
          • \u65e0\u5b8c\u6574\u6027\u6821\u9a8c：\u53ea\u6821\u9a8c\u9996\u90e8，\u4e0d\u6821\u9a8c\u6570\u636e\u8f7d\u8377，\u6570\u636e\u53ef\u7be1\u6539\u3002<\/li>\n
          • \u5206\u7247\u673a\u5236\u5b58\u5728\u98ce\u9669：\u5206\u7247\u91cd\u53e0\u3001\u8d85\u5c0f\u5206\u7247\u3001\u5206\u7247\u6570\u91cf\u7206\u70b8\u3002<\/li>\n
          • \u4e0d\u52a0\u5bc6，\u88f8\u4f20：\u94fe\u8def\u4e0a\u4efb\u4f55\u4eba\u53ef\u8bfb\u3002<\/li>\n

            \u5229\u7528<\/h4>\n
              \n
            • IP \u6e90\u5730\u5740\u4f2a\u9020：\u7528\u4e8e DDoS \u53cd\u5c04\u653b\u51fb\u3001\u626b\u63cf\u65f6\u9690\u85cf\u81ea\u8eab\u3002\u6ce8\u610f：\u4f2a\u9020\u6e90 IP \u53ea\u80fd\u300c\u53d1\u51fa\u53bb\u300d，\u6536\u4e0d\u5230\u56de\u5305，\u6240\u4ee5\u53ea\u9002\u5408\u5355\u5411\u653b\u51fb（SYN Flood\u3001\u53cd\u5c04\u653e\u5927），\u4e0d\u80fd\u7528\u4f5c\u6b63\u5e38\u901a\u4fe1\u3002<\/li>\n
            • IP \u5206\u7247\u653b\u51fb：\n
                \n
              • Teardrop \/ \u91cd\u53e0\u5206\u7247：\u6784\u9020\u7247\u504f\u79fb\u91cd\u53e0\u7684\u5206\u7247，\u8001\u7cfb\u7edf\u91cd\u7ec4\u65f6\u5d29\u6e83；<\/li>\n
              • \u5206\u7247\u7ed5\u8fc7 IDS：\u628a\u653b\u51fb\u8f7d\u8377\u5207\u788e，\u8ba9\u7279\u5f81\u4e32\u8de8\u5206\u7247，\u7b80\u5355 IDS \u9010\u5305\u5339\u914d\u5c31\u5931\u6548；<\/li>\n
              • \u5fae\u5c0f\u5206\u7247（tiny fragment）：\u7b2c\u4e00\u7247\u53ea\u88c5 8 \u5b57\u8282 TCP \u5934\u7684\u4e00\u90e8\u5206，\u903c\u9632\u706b\u5899\u65e0\u6cd5\u5224\u65ad\u7aef\u53e3\u3002<\/li>\n<\/ul>\n<\/li>\n
              • TTL \u6b3a\u9a97：\u4f2a\u9020\u8f83\u5c0f TTL \u8ba9\u5305\u63d0\u524d\u4e22\u5f03，\u9690\u85cf\u626b\u63cf\u6e90（\u914d\u5408 traceroute \u63a2\u6d4b\u62d3\u6251）\u3002<\/li>\n<\/ul>\n

                \u9632\u5fa1：\u5165\u65b9\u5411 uRPF \u53cd\u5411\u8def\u7531\u6821\u9a8c（\u6e90 IP \u662f\u5426\u771f\u7684\u4ece\u8fd9\u6761\u8def\u6765）\u3001\u9632\u706b\u5899\u8fc7\u6ee4\u3001IPsec \u52a0\u5bc6\u3001\u5206\u7247\u91cd\u7ec4\u7b56\u7565（\u4e22\u5f03\u5f02\u5e38\u5206\u7247）\u3001IDS \u505a\u6d41\u91cd\u7ec4\u800c\u4e0d\u662f\u9010\u5305\u5339\u914d\u3002<\/p>\n

                IPv6 \u6539\u5584\u4e86\u90e8\u5206，\u4f46\u57fa\u7840\u4f9d\u7136\u65e0\u8ba4\u8bc1\u3002<\/p>\n

                \u8865\u5145：IPv6 \u5e72\u4e86\u4ec0\u4e48（\u5bf9\u6bd4\u8868）<\/h4>\n\n\u7ef4\u5ea6IPv4IPv6<\/tr>\n\n\n\n\n\n\n\n\n\n
                \u5730\u5740\u957f\u5ea6<\/td>\n32 \u4f4d<\/td>\n128 \u4f4d<\/td>\n<\/tr>\n
                \u9996\u90e8<\/td>\n20B + \u53ef\u53d8\u9009\u9879<\/td>\n\u56fa\u5b9a 40B，\u9009\u9879\u653e\u6269\u5c55\u5934<\/td>\n<\/tr>\n
                \u9996\u90e8\u6821\u9a8c\u548c<\/td>\n\u6709<\/td>\n\u53d6\u6d88（\u4ea4\u7ed9\u4e0a\u4e0b\u5c42）<\/td>\n<\/tr>\n
                \u5206\u7247<\/td>\n\u8def\u7531\u5668\u53ef\u5206\u6bb5<\/td>\n\u53ea\u6709\u6e90\u4e3b\u673a\u80fd\u5206\u7247，\u7528 Fragment \u6269\u5c55\u5934<\/td>\n<\/tr>\n
                \u5730\u5740\u89e3\u6790<\/td>\nARP（\u5e7f\u64ad）<\/td>\nNDP（ICMPv6 \u7ec4\u64ad）<\/td>\n<\/tr>\n
                \u81ea\u52a8\u914d\u7f6e<\/td>\nDHCP<\/td>\nSLAAC（\u4e5f\u53ef DHCPv6）<\/td>\n<\/tr>\n
                \u5e7f\u64ad<\/td>\n\u6709<\/td>\n\u53d6\u6d88\u5e7f\u64ad，\u6539\u7528\u7ec4\u64ad<\/td>\n<\/tr>\n
                NAT<\/td>\n\u666e\u904d\u4f7f\u7528<\/td>\n\u8bbe\u8ba1\u4e0a\u4e0d\u9700\u8981（\u4f46\u8981\u9690\u79c1\u4ecd\u6709 NAT66）<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                \u5b89\u5168\u5f71\u54cd：IPv6 \u6ca1\u6709 NAT \u7684\u300c\u4f2a\u9694\u79bb\u300d，\u4e3b\u673a\u76f4\u63a5\u66b4\u9732 \u2192 \u9632\u706b\u5899\u5fc5\u987b\u663e\u5f0f\u914d\u7f6e；NDP \u6b3a\u9a97\u3001RA \u6b3a\u9a97\u662f ARP \u6b3a\u9a97\u7684\u7b49\u4ef7\u7269；IPv6 \u9996\u90e8\u65e0\u6821\u9a8c\u548c \u610f\u5473\u7740\u8f7d\u8377\u5b8c\u6574\u6027\u5b8c\u5168\u4f9d\u8d56\u4e0a\u5c42\u3002<\/p>\n

                3.2 ICMP（Internet Control Message Protocol，\u4e92\u8054\u7f51\u63a7\u5236\u62a5\u6587\u534f\u8bae）<\/h3>\n

                \u4ecb\u7ecd：\u5c5e\u4e8e \u7f51\u7edc\u5c42（IP \u5c42）\u534f\u8bae，\u4f9d\u9644\u4e8e IP \u534f\u8bae（\u534f\u8bae\u53f7 1），\u5c01\u88c5\u5728 IP \u62a5\u6587\u4e2d，\u6ca1\u6709\u72ec\u7acb\u7684\u4f20\u8f93\u7aef\u53e3\u3002<\/p>\n

                \u6838\u5fc3\u4f5c\u7528：\u4f20\u9012\u7f51\u7edc\u63a7\u5236\u4fe1\u606f\u3001\u5dee\u9519\u62a5\u544a\u3001\u63a2\u6d4b\u7f51\u7edc\u72b6\u6001，\u4e0d\u662f\u7528\u6765\u4f20\u8f93\u4e1a\u52a1\u6570\u636e\u7684\u3002<\/p>\n

                \u4e00\u53e5\u8bdd\u6982\u62ec：IP \u8d1f\u8d23\u9001\u5305，ICMP \u8d1f\u8d23\u544a\u8bc9\u5bf9\u65b9：\u5305\u6709\u6ca1\u6709\u9001\u5230\u3001\u4e3a\u4ec0\u4e48\u9001\u4e0d\u5230\u3001\u7f51\u7edc\u662f\u5426\u901a\u7545\u3002<\/p>\n

                \u4e00\u4e2a\u6807\u51c6\u7684 ping，\u94fe\u8def\u662f\u3010\u4ee5\u592a\u7f51 \u2192 IPv4 \u2192 ICMP\u3011，\u4e0d\u7ecf\u8fc7\u4f20\u8f93\u5c42\u3002<\/p>\n

                \"ping<\/p>\n

                ICMP \u62a5\u6587\u7ed3\u6784：Type(1B) + Code(1B) + \u6821\u9a8c\u548c(2B) + 4B \u5934\u90e8（\u968f\u7c7b\u578b\u53d8\u5316）+ \u6570\u636e\u3002<\/p>\n

                \u5fc5\u8bb0\u7684\u7c7b\u578b\/\u4ee3\u7801：<\/p>\n\nType\u540d\u79f0\u5e38\u89c1 Code\u7528\u9014 \/ \u5b89\u5168\u542b\u4e49<\/tr>\n\n\n\n\n\n\n\n\n
                0 \/ 8<\/td>\nEcho Reply \/ Echo Request<\/td>\n0<\/td>\nping \u7684\u5f80\u8fd4；\u626b\u63cf\u7b2c\u4e00\u6b65<\/td>\n<\/tr>\n
                3<\/td>\nDestination Unreachable<\/td>\n0 \u7f51\u7edc \/ 1 \u4e3b\u673a \/ 3 \u7aef\u53e3 \/ 4 \u9700\u5206\u7247\u4f46 DF=1 \/ 13 \u7ba1\u7406\u7981\u6b62<\/td>\nUDP \u626b\u63cf\u9760 Code 3（\u7aef\u53e3\u4e0d\u53ef\u8fbe）\u5224\u65ad\u7aef\u53e3\u5173\u95ed；Code 4 \u662f PMTUD<\/td>\n<\/tr>\n
                5<\/td>\nRedirect<\/td>\n0 \u7f51\u7edc \/ 1 \u4e3b\u673a<\/td>\n\u8ba9\u4e3b\u673a\u6539\u8d70\u522b\u7684\u7f51\u5173 \u2192 \u4f2a\u9020\u53ef\u52ab\u6301\u8def\u7531<\/td>\n<\/tr>\n
                11<\/td>\nTime Exceeded<\/td>\n0 TTL \u8017\u5c3d \/ 1 \u5206\u7247\u91cd\u7ec4\u8d85\u65f6<\/td>\ntraceroute \u7684\u539f\u7406<\/td>\n<\/tr>\n
                12<\/td>\nParameter Problem<\/td>\n0<\/td>\n\u9996\u90e8\u5b57\u6bb5\u51fa\u9519<\/td>\n<\/tr>\n
                13 \/ 14<\/td>\nTimestamp Request \/ Reply<\/td>\n0<\/td>\n\u53ef\u63a2\u6d4b\u5bf9\u7aef\u65f6\u95f4<\/td>\n<\/tr>\n
                4<\/td>\nSource Quench<\/td>\n\u2014<\/td>\n\u5df2\u5e9f\u5f03（\u65e9\u671f\u62e5\u585e\u63a7\u5236）<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                ICMPv6 \u662f\u53e6\u4e00\u5957\u7c7b\u578b\u53f7：1 \u76ee\u7684\u4e0d\u53ef\u8fbe\u30012 \u5305\u8fc7\u5927\u30013 \u8d85\u65f6\u30014 \u53c2\u6570\u95ee\u9898\u3001128\/129 Echo\u3001133~137 NDP \u4e94\u4ef6\u5957\u3002<\/p>\n

                \u7f3a\u9677<\/h4>\n
              • \u65e0\u8ba4\u8bc1，\u4efb\u4f55\u4eba\u90fd\u53ef\u4ee5\u53d1 ICMP \u62a5\u6587，\u4e5f\u53ef\u4ee5\u4f2a\u9020\u6e90 IP\u3002<\/li>\n
              • \u5f88\u591a\u7f51\u7edc\u65e9\u671f\u5bbd\u677e\u653e\u884c ICMP（\u4e3a\u4e86\u300c\u80fd ping \u901a\u597d\u6392\u969c\u300d）\u3002<\/li>\n
              • ICMP \u8f7d\u8377\u6ca1\u6709\u8bed\u4e49\u9650\u5236 \u2192 \u53ef\u4ee5\u88ab\u62ff\u6765\u5f53\u4f20\u8f93\u901a\u9053\u3002<\/li>\n

                \u5229\u7528<\/h4>\n
              • Ping \u6d2a\u6c34（ICMP Flood）DDoS：\u5927\u91cf Echo Request \u6253\u5411\u76ee\u6807，\u8017\u5c3d\u5e26\u5bbd\u548c\u5904\u7406\u8d44\u6e90\u3002<\/li>\n
              • Smurf \u653b\u51fb：\u4f2a\u9020\u6e90 IP = \u53d7\u5bb3\u8005，\u628a Echo Request \u53d1\u5230\u5e7f\u64ad\u5730\u5740，\u6574\u4e2a\u5b50\u7f51\u7684\u4e3b\u673a\u90fd\u56de Echo Reply \u7ed9\u53d7\u5bb3\u8005 \u2192 1 \u4e2a\u5305\u653e\u5927\u6210\u51e0\u767e\u4e2a（\u73b0\u4ee3\u8bbe\u5907\u9ed8\u8ba4\u4e0d\u54cd\u5e94\u5e7f\u64ad ping，\u5df2\u57fa\u672c\u5931\u6548，\u4f46\u6982\u5ff5\u5e38\u8003）\u3002<\/li>\n
              • ICMP \u91cd\u5b9a\u5411\u6b3a\u9a97：\u4f2a\u9020 Type 5 \u91cd\u5b9a\u5411\u62a5\u6587，\u8bf1\u5bfc\u53d7\u5bb3\u8005\u4fee\u6539\u8def\u7531，\u6d41\u91cf\u8d70\u653b\u51fb\u8005\u3002<\/li>\n
              • ICMP \u96a7\u9053：\u628a\u5176\u4ed6\u6570\u636e\u5c01\u88c5\u5728 ICMP \u8f7d\u8377\u91cc，\u7ed5\u8fc7\u9632\u706b\u5899\u5916\u4f20\u6570\u636e（\u6570\u636e\u6e17\u51fa）\u3002\u5de5\u5177\u5982 ptunnel\u3001icmpsh\u3002<\/li>\n
              • \u626b\u63cf：ping \u626b\u63cf\u63a2\u6d4b\u4e3b\u673a\u662f\u5426\u5b58\u6d3b；ICMP Timestamp \u63a2\u6d4b\u65f6\u533a\/\u65f6\u95f4\u3002<\/li>\n

                \u9632\u5fa1：\u9632\u706b\u5899\u9650\u5236 ICMP \u901f\u7387\u3001\u7981\u6b62 ICMP \u91cd\u5b9a\u5411（Redirect \u5168\u4e22）\u3001\u963b\u65ad ICMP \u96a7\u9053（\u9650\u5236\u8f7d\u8377\u5927\u5c0f\u548c\u9891\u7387）\u3001\u4f46\u4e0d\u8981\u4e00\u5200\u5207\u5168\u7981 \u2014\u2014 \u4f1a\u6253\u65ad PMTUD\u3002<\/p>\n

                3.3 \u8865\u5145：IGMP（\u4e00\u53e5\u8bdd）<\/h3>\n

                IGMP（Internet Group Management Protocol，\u534f\u8bae\u53f7 2）\u7528\u6765\u7ba1\u7406\u7ec4\u64ad\u7ec4\u6210\u5458：\u4e3b\u673a\u544a\u8bc9\u672c\u5730\u8def\u7531\u5668\u300c\u6211\u8981\u52a0\u5165\/\u9000\u51fa\u67d0\u4e2a\u7ec4\u64ad\u7ec4\u300d，\u8def\u7531\u5668\u636e\u6b64\u51b3\u5b9a\u5f80\u8fd9\u4e2a\u7f51\u6bb5\u8f6c\u53d1\u54ea\u4e9b\u7ec4\u64ad\u6d41\u3002IPTV\u3001\u89c6\u9891\u4f1a\u8bae\u7528\u5b83\u3002\u5b89\u5168\u4e0a\u5173\u6ce8 IGMP \u62a5\u6587\u4f2a\u9020\u5bfc\u81f4\u7ec4\u64ad\u6d41\u91cf\u6cdb\u6d2a\u3002<\/p>\n

                \n

                \u56db\u3001\u4f20\u8f93\u5c42<\/h2>\n

                \u8fd9\u4e00\u5c42\u7684\u4e00\u53e5\u8bdd：\u7f51\u7edc\u5c42\u53ea\u7ba1\u628a\u5305\u9001\u5230\u4e3b\u673a，\u4f20\u8f93\u5c42\u9760\u7aef\u53e3\u628a\u6570\u636e\u4ea4\u7ed9\u8fdb\u7a0b；\u540c\u65f6\u53ea\u6709\u8fd9\u4e00\u5c42\u5f00\u59cb，\u624d\u51fa\u73b0\u300c\u53ef\u9760\u6027\u300d\u8fd9\u4e2a\u8bdd\u9898\u3002<\/p>\n

                4.0 \u7aef\u53e3（\u4e00\u53e5\u8bdd\u5e26\u8fc7）<\/h3>\n

                \u7aef\u53e3 0~65535，\u7528\u6765\u5728\u540c\u4e00\u53f0\u4e3b\u673a\u5185\u533a\u5206\u4e0d\u540c\u8fdb\u7a0b；TCP \u7aef\u53e3\u548c UDP \u7aef\u53e3\u662f\u4e24\u4e2a\u72ec\u7acb\u7684\u7f16\u53f7\u7a7a\u95f4（53\/UDP \u548c 53\/TCP \u662f\u4e24\u4e2a\u4e0d\u540c\u7684\u4e1c\u897f，DNS \u540c\u65f6\u7528）\u3002\u4e94\u5143\u7ec4 \u6e90IP, \u6e90\u7aef\u53e3, \u76ee\u7684IP, \u76ee\u7684\u7aef\u53e3, \u534f\u8bae \u552f\u4e00\u6807\u8bc6\u4e00\u6761\u8fde\u63a5\u3002<\/p>\n

                \u8be6\u7ec6\u5185\u5bb9（\u77e5\u540d\u7aef\u53e3\u5212\u5206\u3001Socket\u3001C\/S \u6a21\u578b）\u89c1\u540c\u76ee\u5f55\u300aWeb\u5b89\u5168\u57fa\u7840.md\u300b\u7684\u300c\u524d\u7f6e\u77e5\u8bc6\u300d\u4e00\u8282，\u8fd9\u91cc\u4e0d\u91cd\u590d\u3002<\/p>\n

                4.1 TCP（Transmission Control Protocol，\u4f20\u8f93\u63a7\u5236\u534f\u8bae）<\/h3>\n

                \u6838\u5fc3\u4f5c\u7528：\u5728\u4e0d\u53ef\u9760\u7684 IP \u4e4b\u4e0a，\u63d0\u4f9b\u9762\u5411\u8fde\u63a5\u3001\u53ef\u9760\u3001\u6709\u5e8f\u3001\u6709\u6d41\u91cf\u63a7\u5236\u548c\u62e5\u585e\u63a7\u5236\u7684\u5b57\u8282\u6d41\u670d\u52a1\u3002<\/p>\n

                \u9996\u90e8\u7ed3\u6784（\u56fa\u5b9a 20 \u5b57\u8282 + \u6700\u591a 40 \u5b57\u8282\u9009\u9879）：<\/p>\n

                \"image-20261104103257002\"<\/p>\n

                \u5173\u952e\u5b57\u6bb5：<\/p>\n\n\u5b57\u6bb5\u4f5c\u7528\u5751<\/tr>\n\n\n\n\n\n\n\n
                \u5e8f\u53f7 Seq<\/td>\n\u672c\u62a5\u6587\u6570\u636e\u7b2c\u4e00\u4e2a\u5b57\u8282\u7684\u7f16\u53f7<\/td>\n32 \u4f4d\u56de\u7ed5；SYN\/FIN \u5404\u5360 1 \u4e2a\u5e8f\u53f7<\/td>\n<\/tr>\n
                \u786e\u8ba4\u53f7 Ack<\/td>\n\u671f\u671b\u6536\u5230\u7684\u4e0b\u4e00\u4e2a\u5b57\u8282 = \u5bf9\u65b9 Seq + \u5bf9\u65b9\u6570\u636e\u957f\u5ea6<\/td>\n\u53ea\u5bf9 ACK=1 \u7684\u62a5\u6587\u6709\u6548<\/td>\n<\/tr>\n
                \u6570\u636e\u504f\u79fb<\/td>\n\u9996\u90e8\u957f\u5ea6，\u5355\u4f4d 4 \u5b57\u8282<\/td>\n\u6709\u9009\u9879\u65f6 > 5<\/td>\n<\/tr>\n
                \u6807\u5fd7\u4f4d<\/td>\nURG ACK PSH RST SYN FIN + CWR ECE<\/td>\nPSH = \u5c3d\u5feb\u4ea4\u7ed9\u5e94\u7528\u5c42；RST = \u76f4\u63a5\u65ad\u8fde<\/td>\n<\/tr>\n
                \u7a97\u53e3 Win<\/td>\n\u63a5\u6536\u65b9\u8fd8\u80fd\u6536\u591a\u5c11\u5b57\u8282<\/td>\n16 \u4f4d\u4e0d\u591f\u7528 \u2192 \u9760 WS \u9009\u9879\u5de6\u79fb\u653e\u5927<\/td>\n<\/tr>\n
                \u6821\u9a8c\u548c<\/td>\n\u4f2a\u9996\u90e8 + \u9996\u90e8 + \u6570\u636e<\/td>\n\u4e0e IP \u9996\u90e8\u6821\u9a8c\u548c\u5206\u5de5\u4e0d\u540c<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                \u4e09\u6b21\u63e1\u624b \/ \u56db\u6b21\u6325\u624b（\u5b9e\u62cd\u6293\u5305）<\/h4>\n

                \"TCP<\/p>\n\n\u7f16\u53f7\u6807\u5fd7\u542b\u4e49<\/tr>\n\n\n\n\n\n\n\n\n\n\n
                10350<\/td>\n[SYN]<\/td>\n\u5ba2\u6237\u7aef\u53d1\u8d77\u8fde\u63a5（\u63e1\u624b\u7b2c 1 \u6b65）<\/td>\n<\/tr>\n
                10351<\/td>\n[SYN, ACK]<\/td>\n\u670d\u52a1\u7aef\u5e94\u7b54（\u63e1\u624b\u7b2c 2 \u6b65）<\/td>\n<\/tr>\n
                10352<\/td>\n[ACK]<\/td>\n\u5ba2\u6237\u7aef\u786e\u8ba4，\u8fde\u63a5\u5efa\u7acb（\u63e1\u624b\u7b2c 3 \u6b65）<\/td>\n<\/tr>\n
                10353<\/td>\nHTTP GET<\/td>\n\u53d1\u9001 HTTP GET \u8bf7\u6c42<\/td>\n<\/tr>\n
                10367<\/td>\n[PSH, ACK]<\/td>\n\u63a8\u9001\u6570\u636e<\/td>\n<\/tr>\n
                10369<\/td>\nHTTP\/1.1 200 OK<\/td>\n\u670d\u52a1\u5668\u8fd4\u56de JSON \u54cd\u5e94<\/td>\n<\/tr>\n
                10372<\/td>\n[FIN, ACK]<\/td>\n\u5ba2\u6237\u7aef\u4e3b\u52a8\u5173\u95ed\u8fde\u63a5<\/td>\n<\/tr>\n
                10379<\/td>\n[FIN, ACK]<\/td>\n\u670d\u52a1\u7aef\u5173\u95ed<\/td>\n<\/tr>\n
                10385<\/td>\n[ACK]<\/td>\n\u6700\u540e\u786e\u8ba4，\u8fde\u63a5\u65ad\u5f00<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
                TCP \u6293\u5305\u5206\u6790（HTTP GET \u793a\u4f8b）<\/h5>\n

                \u73af\u5883：Wireshark，\u5f00\u542f\u76f8\u5bf9\u5e8f\u53f7，Seq \u4ece 0 \u5f00\u59cb\u663e\u793a，\u4e0d\u662f\u771f\u5b9e\u539f\u59cb\u5e8f\u5217\u53f7<\/p>\n

                  \n
                • \u5ba2\u6237\u7aef：192.168.1.59:1896（\u672c\u673a，\u968f\u673a\u7aef\u53e3）<\/li>\n
                • \u670d\u52a1\u7aef：44.206.195.5:80（httpbin，HTTP 80 \u7aef\u53e3）<\/li>\n
                • \u6d4f\u89c8\u5668\u8bbf\u95ee http:\/\/httpbin.org\/get \u7684\u5305<\/li>\n<\/ul>\n

                  \u6838\u5fc3\u89c4\u5219：<\/p>\n

                  Ack \u53f7 = \u5bf9\u65b9\u4e0a\u4e00\u4e2a Seq + \u5bf9\u65b9\u62a5\u6587\u643a\u5e26\u7684\u6570\u636e\u957f\u5ea6
                  \n\u2705 SYN \/ FIN \u6807\u5fd7\u672c\u8eab\u5360\u7528 1 \u4e2a\u5e8f\u53f7，\u5373\u4f7f\u8f7d\u8377 Len=0<\/p>\n

                  \u4e00\u3001TCP \u4e09\u6b21\u63e1\u624b（\u5efa\u7acb\u8fde\u63a5）<\/p>\n\n\u62a5\u6587\u65b9\u5411\u6807\u5fd7\u8bf4\u660e<\/tr>\n\n\n\n\n
                  1896 \u2192 80<\/td>\n[SYN] Seq=0 Win=65535 Len=0<\/td>\n\u5ba2\u6237\u7aef\u53d1\u8d77\u8fde\u63a5\u8bf7\u6c42，\u521d\u59cb\u5e8f\u53f7 0，\u65e0\u5e94\u7528\u6570\u636e<\/td>\n<\/tr>\n
                  80 \u2192 1896<\/td>\n[SYN,ACK] Seq=0 Ack=1 Win=26883 Len=0<\/td>\n\u670d\u52a1\u7aef\u786e\u8ba4\u6536\u5230 SYN（Ack=0+1=1），\u540c\u65f6\u53d1\u8d77\u81ea\u5df1\u7684\u8fde\u63a5\u8bf7\u6c42<\/td>\n<\/tr>\n
                  1896 \u2192 80<\/td>\n[ACK] Seq=1 Ack=1 Win=65280 Len=0<\/td>\n\u5ba2\u6237\u7aef\u786e\u8ba4\u6536\u5230\u670d\u52a1\u7aef SYN（Ack=0+1=1）<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \u2705 \u4e09\u6b21\u63e1\u624b\u5b8c\u6210，TCP \u901a\u9053\u5c31\u7eea，\u53ef\u4ee5\u4f20\u8f93\u4e0a\u5c42 HTTP \u6570\u636e\u3002<\/p>\n

                  \u4e8c\u3001HTTP \u4e1a\u52a1\u6570\u636e\u4f20\u8f93<\/p>\n\n\u62a5\u6587\u65b9\u5411\u6807\u5fd7\u8bf4\u660e<\/tr>\n\n\n\n\n\n
                  1896 \u2192 80<\/td>\nGET \/get HTTP\/1.1<\/td>\n\u5ba2\u6237\u7aef\u53d1\u9001 GET \u8bf7\u6c42，TCP \u8f7d\u8377 79 \u5b57\u8282，\u5e26 PSH,ACK；PSH：\u901a\u77e5\u5185\u6838\u5c3d\u5feb\u628a\u6570\u636e\u4ea4\u7ed9\u5e94\u7528\u5c42，\u4e0d\u8981\u7f13\u5b58<\/td>\n<\/tr>\n
                  80 \u2192 1896<\/td>\n[ACK] Seq=1 Ack=80 Win=27136 Len=0<\/td>\n\u670d\u52a1\u7aef\u786e\u8ba4：\u5df2\u6536\u5230 1+79=80 \u5b57\u8282<\/td>\n<\/tr>\n
                  80 \u2192 1896<\/td>\n[PSH,ACK] Seq=1 Ack=80 Len=230<\/td>\n\u670d\u52a1\u7aef\u63a8\u9001 HTTP 200 OK + JSON \u54cd\u5e94，\u8f7d\u8377 230 \u5b57\u8282<\/td>\n<\/tr>\n
                  1896 \u2192 80<\/td>\n[ACK] Seq=80 Ack=487 Win=65024 Len=0<\/td>\n\u5ba2\u6237\u7aef\u786e\u8ba4\u6536\u5230\u670d\u52a1\u7aef\u54cd\u5e94\u6570\u636e<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \u2705 HTTP \u4e00\u95ee\u4e00\u7b54\u4ea4\u4e92\u5b8c\u6210\u3002<\/p>\n

                  \u4e09\u3001TCP \u6325\u624b\u65ad\u5f00\u8fde\u63a5（\u5ba2\u6237\u7aef\u4e3b\u52a8\u5173\u95ed）<\/p>\n

                  \u6559\u6750\u6807\u51c6\u662f\u56db\u6b21\u6325\u624b；\u771f\u5b9e\u7f51\u7edc\u4e2d，\u670d\u52a1\u7aef\u7684 ACK \u548c FIN \u7ecf\u5e38\u5408\u5e76\u6210\u4e00\u4e2a\u62a5\u6587，\u6293\u5305\u53ea\u770b\u5230 3 \u4e2a\u5305\u5c5e\u4e8e\u6b63\u5e38\u4f18\u5316，\u8003\u8bd5\u7b54\u9898\u4ecd\u5199\u56db\u6b21\u6325\u624b\u3002<\/p>\n\n\u62a5\u6587\u65b9\u5411\u6807\u5fd7\u8bf4\u660e<\/tr>\n\n\n\n\n
                  1896 \u2192 80<\/td>\n[FIN,ACK] Seq=80 Ack=487 Win=65024 Len=0<\/td>\n\u5ba2\u6237\u7aef\u544a\u77e5：\u6211\u65b9\u65e0\u6570\u636e\u53d1\u9001，\u8bf7\u6c42\u5173\u95ed\u3010\u5ba2\u6237\u7aef\u2192\u670d\u52a1\u7aef\u3011\u65b9\u5411<\/td>\n<\/tr>\n
                  80 \u2192 1896<\/td>\n[FIN,ACK] Seq=487 Ack=81 Win=27136 Len=0<\/td>\n\u670d\u52a1\u7aef：\u786e\u8ba4\u5ba2\u6237\u7aef FIN（Ack=80+1=81）；\u540c\u65f6\u6211\u65b9\u4e5f\u65e0\u6570\u636e，\u5173\u95ed\u3010\u670d\u52a1\u7aef\u2192\u5ba2\u6237\u7aef\u3011\u65b9\u5411<\/td>\n<\/tr>\n
                  1896 \u2192 80<\/td>\n[ACK] Seq=81 Ack=488 Win=65024 Len=0<\/td>\n\u5ba2\u6237\u7aef\u786e\u8ba4\u6536\u5230\u670d\u52a1\u7aef FIN（Ack=487+1=488）<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \u2705 \u53cc\u5411\u8fde\u63a5\u5168\u90e8\u91ca\u653e\u3002<\/p>\n

                  \u56db\u3001\u5b57\u6bb5\u91ca\u4e49<\/p>\n\n\u5b57\u6bb5\u542b\u4e49<\/tr>\n\n\n\n\n\n\n
                  Win<\/td>\n\u6ed1\u52a8\u7a97\u53e3\u5927\u5c0f，\u6d41\u91cf\u63a7\u5236，\u544a\u8bc9\u5bf9\u65b9\u5f53\u524d\u672c\u673a\u6700\u591a\u53ef\u63a5\u6536\u5b57\u8282\u6570<\/td>\n<\/tr>\n
                  MSS=1460<\/td>\n\u6700\u5927\u5206\u6bb5\u5927\u5c0f；TCP \u5355\u6bb5\u6700\u5927\u8f7d\u8377，MTU(1500) – IP\u5934(20) – TCP\u5934(20)<\/td>\n<\/tr>\n
                  WS=256<\/td>\nWindow Scale \u7a97\u53e3\u7f29\u653e\u56e0\u5b50，\u7528\u4e8e\u9ad8\u901f\u7f51\u7edc\u653e\u5927\u7a97\u53e3<\/td>\n<\/tr>\n
                  SACK_PERM<\/td>\n\u5141\u8bb8\u9009\u62e9\u6027\u786e\u8ba4，\u4e22\u5305\u65f6\u53ea\u91cd\u4f20\u4e22\u5931\u5206\u7247，\u4e0d\u7528\u91cd\u4f20\u5168\u90e8<\/td>\n<\/tr>\n
                  Len<\/td>\nTCP \u8f7d\u8377\u957f\u5ea6（\u4e0d\u542b TCP \u5934\u90e8）；Len=0 \u4ee3\u8868\u7eaf TCP \u63a7\u5236\u62a5\u6587，\u65e0\u5e94\u7528\u5c42\u6570\u636e<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \u4e94\u3001\u5e8f\u53f7\u6821\u9a8c\u793a\u4f8b<\/p>\n

                • \u5ba2\u6237\u7aef SYN Seq=0 \u2192 \u670d\u52a1\u7aef Ack = 0 + 1 = 1 \u2714<\/li>\n
                • \u670d\u52a1\u7aef SYN Seq=0 \u2192 \u5ba2\u6237\u7aef Ack = 0 + 1 = 1 \u2714<\/li>\n
                • \u5ba2\u6237\u7aef HTTP \u8f7d\u8377 79 \u5b57\u8282，Seq=1 \u2192 \u670d\u52a1\u7aef Ack = 1 + 79 = 80 \u2714<\/li>\n

                  TCP \u72b6\u6001\u673a<\/h4>\n\n\u72b6\u6001\u8c01\u5728\u4ec0\u4e48\u6761\u4ef6\u4e0b\u8fdb\u5165\u8bf4\u660e<\/tr>\n\n\n\n\n\n\n\n\n\n
                  LISTEN<\/td>\n\u670d\u52a1\u7aef listen() \u4e4b\u540e<\/td>\n\u7b49\u5f85 SYN<\/td>\n<\/tr>\n
                  SYN_SENT<\/td>\n\u5ba2\u6237\u7aef\u53d1 SYN \u4e4b\u540e<\/td>\n\u7b49\u5f85 SYN+ACK<\/td>\n<\/tr>\n
                  SYN_RCVD<\/td>\n\u670d\u52a1\u7aef\u6536\u5230 SYN\u3001\u56de\u4e86 SYN+ACK<\/td>\n\u534a\u8fde\u63a5\u961f\u5217\u5728\u8fd9\u91cc\u5806\u79ef \u2192 SYN Flood \u6253\u7684\u5c31\u662f\u5b83<\/td>\n<\/tr>\n
                  ESTABLISHED<\/td>\n\u53cc\u65b9\u90fd\u6536\u5230 ACK<\/td>\n\u6570\u636e\u53ef\u4f20<\/td>\n<\/tr>\n
                  FIN_WAIT_1\/2<\/td>\n\u4e3b\u52a8\u5173\u95ed\u65b9\u53d1 FIN \u4e4b\u540e<\/td>\n<\/td>\n<\/tr>\n
                  CLOSE_WAIT<\/td>\n\u88ab\u52a8\u5173\u95ed\u65b9\u6536\u5230 FIN<\/td>\n\u5927\u91cf CLOSE_WAIT = \u5e94\u7528\u6ca1\u8c03 close()，\u4ee3\u7801\u95ee\u9898<\/td>\n<\/tr>\n
                  TIME_WAIT<\/td>\n\u4e3b\u52a8\u5173\u95ed\u65b9\u6700\u540e<\/td>\n\u7b49 2MSL，\u4fdd\u8bc1\u6700\u540e\u4e00\u4e2a ACK \u80fd\u91cd\u4f20\u3001\u8001\u62a5\u6587\u81ea\u7136\u6d88\u4ea1<\/td>\n<\/tr>\n
                  LAST_ACK<\/td>\n\u88ab\u52a8\u5173\u95ed\u65b9\u53d1\u5b8c FIN<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \u6392\u969c\u53e3\u8bc0：TIME_WAIT \u591a = \u8fde\u63a5\u88ab\u4e3b\u52a8\u5173\u95ed\u5f97\u592a\u591a，\u7aef\u53e3\u53ef\u80fd\u4e0d\u591f\u7528；CLOSE_WAIT \u591a = \u5e94\u7528\u6ca1\u5173\u8fde\u63a5，\u662f bug；SYN_RCVD \u591a = \u6709\u4eba\u5728\u6253 SYN Flood\u3002<\/p>\n

                  \u6d41\u91cf\u63a7\u5236 vs \u62e5\u585e\u63a7\u5236（\u4e00\u53e5\u8bdd\u533a\u5206）<\/h4>\n\n\u6d41\u91cf\u63a7\u5236\u62e5\u585e\u63a7\u5236<\/tr>\n\n\n\n\n
                  \u89e3\u51b3\u8c01\u7684\u95ee\u9898<\/td>\n\u63a5\u6536\u65b9\u6765\u4e0d\u53ca\u5904\u7406<\/td>\n\u7f51\u7edc\u627f\u53d7\u4e0d\u4f4f<\/td>\n<\/tr>\n
                  \u624b\u6bb5<\/td>\n\u6ed1\u52a8\u7a97\u53e3（Win）<\/td>\n\u6162\u542f\u52a8\u3001\u62e5\u585e\u907f\u514d\u3001\u5feb\u91cd\u4f20\u3001\u5feb\u6062\u590d（CUBIC \/ BBR）<\/td>\n<\/tr>\n
                  \u4fe1\u53f7<\/td>\n\u63a5\u6536\u65b9\u901a\u544a\u7a97\u53e3<\/td>\n\u4e22\u5305 \/ \u65f6\u5ef6<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \u7f3a\u9677<\/h4>\n
                • \u4e09\u6b21\u63e1\u624b\u673a\u5236：SYN \u961f\u5217\u8d44\u6e90\u6709\u9650，\u534a\u8fde\u63a5\u72b6\u6001\u8981\u5360\u5185\u5b58\u3002<\/li>\n
                • \u5e8f\u53f7\u53ef\u9884\u6d4b（\u8001\u65e7\u7cfb\u7edf）：\u521d\u59cb\u5e8f\u53f7\u82e5\u7528\u7b80\u5355\u9012\u589e，\u53ef\u88ab\u731c\u4e2d\u3002<\/li>\n
                • \u8fde\u63a5\u65e0\u5f3a\u8eab\u4efd\u7ed1\u5b9a：TCP \u8fde\u63a5\u53ea\u9760\u56db\u5143\u7ec4\u6807\u8bc6，\u8c01\u80fd\u6784\u9020\u51fa\u5408\u6cd5\u56db\u5143\u7ec4+\u5e8f\u53f7，\u8c01\u5c31\u662f\u300c\u8fd9\u6761\u8fde\u63a5\u300d\u3002<\/li>\n
                • \u961f\u5934\u963b\u585e：\u4e00\u4e2a\u5305\u4e22\u4e86，\u540e\u9762\u6240\u6709\u6570\u636e\u90fd\u8981\u7b49\u5b83\u91cd\u4f20（HTTP\/2 \u591a\u8def\u590d\u7528\u4e5f\u53ea\u89e3\u51b3\u4e86\u5e94\u7528\u5c42\u961f\u5934\u963b\u585e，TCP \u5c42\u7684\u8fd8\u5728 \u2192 HTTP\/3 \u6539\u7528 QUIC\/UDP）\u3002<\/li>\n
                • TIME_WAIT \u5360\u7528\u7aef\u53e3：\u9ad8\u5e76\u53d1\u77ed\u8fde\u63a5\u573a\u666f\u4e0b\u7aef\u53e3\u8017\u5c3d\u3002<\/li>\n

                  \u5229\u7528<\/h4>\n
                • SYN \u6d2a\u6c34\u653b\u51fb（SYN Flood）：\u5927\u91cf\u4f2a\u9020\u6e90 IP \u7684 SYN \u5305，\u670d\u52a1\u5668\u56de SYN+ACK \u540e\u7b49\u5f85 ACK，\u5360\u6ee1\u534a\u8fde\u63a5\u961f\u5217，\u62d2\u7edd\u670d\u52a1（\u7ecf\u5178 DDoS）\u3002\u56e0\u4e3a\u6e90 IP \u662f\u4f2a\u9020\u7684，\u670d\u52a1\u5668\u7684 SYN+ACK \u5168\u6253\u5230\u522b\u4eba\u8eab\u4e0a，\u540c\u65f6\u81ea\u5df1\u961f\u5217\u7206\u6389\u3002<\/li>\n
                • TCP \u4f1a\u8bdd\u52ab\u6301：\u8001\u7cfb\u7edf\u5e8f\u53f7\u53ef\u9884\u6d4b，\u731c\u5e8f\u53f7\u63d2\u5165\u4f2a\u9020\u62a5\u6587，\u52ab\u6301\u5df2\u5efa\u7acb\u7684 TCP \u8fde\u63a5（\u672c\u8d28\u662f\u300cTCP \u6ca1\u6709\u5bc6\u7801\u300d）\u3002<\/li>\n
                • RST \u5305\u653b\u51fb：\u4f2a\u9020 RST \u62a5\u6587，\u76f4\u63a5\u8e22\u65ad\u4e00\u6761\u6b63\u5e38 TCP \u8fde\u63a5（\u4e2d\u95f4\u4eba\u53ea\u9700\u77e5\u9053\u56db\u5143\u7ec4 + \u5728\u7a97\u53e3\u5185\u7684\u5e8f\u53f7）\u3002<\/li>\n
                • TCP \u53cd\u5c04\/\u653e\u5927：\u67d0\u4e9b\u670d\u52a1\u5728\u63e1\u624b\u9636\u6bb5\u5c31\u56de\u5927\u91cf\u6570\u636e（\u5982 chargen），\u53ef\u88ab\u7528\u4e8e\u653e\u5927\u3002<\/li>\n
                • \u8fde\u63a5\u8017\u5c3d：\u6162\u901f\u653b\u51fb（Slowloris）\u7528\u5927\u91cf\u300c\u63e1\u624b\u5b8c\u6210\u4f46\u6162\u6162\u53d1\u5934\u300d\u7684\u8fde\u63a5\u5360\u6ee1\u670d\u52a1\u7aef\u5e76\u53d1\u6570\u3002<\/li>\n

                  \u9632\u5fa1：SYN Cookie\u3001SYN \u961f\u5217\u8c03\u5927 + \u9996\u5305\u4e22\u5f03\u3001\u9632\u706b\u5899\/\u6e05\u6d17\u8bbe\u5907\u3001\u968f\u673a\u5f3a\u521d\u59cb\u5e8f\u5217\u53f7（\u73b0\u4ee3 OS \u7528\u52a0\u5bc6\u968f\u673a ISN）\u3001\u8fde\u63a5\u8ddf\u8e2a\u3001\u9650\u5236\u5355 IP \u5e76\u53d1\u3002<\/p>\n

                  4.2 UDP（User Datagram Protocol，\u7528\u6237\u6570\u636e\u62a5\u534f\u8bae）<\/h3>\n

                  \u8fd9\u4e00\u8282\u662f\u539f\u7b14\u8bb0\u7f3a\u5931\u7684\u90e8\u5206，\u4e5f\u662f\u300c\u4e3a\u4ec0\u4e48 DDoS \u53cd\u5c04\u653e\u5927\u51e0\u4e4e\u90fd\u8d70 UDP\u300d\u7684\u7b54\u6848\u6240\u5728\u3002<\/p>\n

                  4.2.1 \u662f\u4ec0\u4e48<\/h4>\n\n\u9879\u5185\u5bb9<\/tr>\n\n\n\n\n\n\n
                  \u540d\u79f0<\/td>\nUDP，User Datagram Protocol，\u7528\u6237\u6570\u636e\u62a5\u534f\u8bae<\/td>\n<\/tr>\n
                  \u5c42\u7ea7<\/td>\n\u4f20\u8f93\u5c42；IP \u534f\u8bae\u53f7 17<\/td>\n<\/tr>\n
                  \u6838\u5fc3\u4f5c\u7528<\/td>\n\u63d0\u4f9b\u6700\u5c0f\u7684\u4f20\u8f93\u670d\u52a1：\u7aef\u53e3\u590d\u7528\/\u5206\u7528 + \u4e00\u4e2a\u53ef\u9009\u7684\u6821\u9a8c\u548c\u3002\u4e0d\u505a\u8fde\u63a5\u3001\u4e0d\u505a\u53ef\u9760\u3001\u4e0d\u505a\u6d41\u63a7\u3001\u4e0d\u505a\u62e5\u585e\u63a7\u5236<\/td>\n<\/tr>\n
                  \u6570\u636e\u5355\u4f4d<\/td>\n\u6570\u636e\u62a5（datagram），\u4e00\u6b21\u53d1\u9001\u4e00\u6761，\u4fdd\u7559\u62a5\u6587\u8fb9\u754c<\/td>\n<\/tr>\n
                  \u4e00\u53e5\u8bdd<\/td>\nTCP \u4fdd\u8bc1\u300c\u5b57\u8282\u6d41\u5b8c\u6574\u9001\u5230\u300d；UDP \u53ea\u4fdd\u8bc1\u300c\u628a\u8fd9\u4e2a\u6570\u636e\u62a5\u8d34\u597d\u7aef\u53e3\u53f7\u6254\u51fa\u53bb\u300d，\u5269\u4e0b\u7684\u5168\u4ea4\u7ed9\u5e94\u7528\u5c42<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \u5b83\u7684\u8bbe\u8ba1\u54f2\u5b66：\u628a IP \u7684\u80fd\u529b\u51e0\u4e4e\u539f\u6837\u4ea4\u7ed9\u5e94\u7528，\u53ea\u8865\u4e24\u4ef6\u4e8b \u2014\u2014 \u7aef\u53e3（\u8fdb\u7a0b\u5bfb\u5740）\u548c\u6821\u9a8c\u548c（\u6700\u57fa\u672c\u7684\u5dee\u9519\u68c0\u6d4b）\u3002\u6240\u4ee5 UDP \u7684\u6240\u6709\u300c\u7f3a\u70b9\u300d，\u672c\u8d28\u90fd\u662f\u300c\u6545\u610f\u4e0d\u505a\u300d\u3002<\/p>\n

                  4.2.2 \u62a5\u6587\u7ed3\u6784<\/h4>\n

                  \"image-20261104103354949\"<\/p>\n

                  \u9996\u90e8\u53ea\u6709 8 \u5b57\u8282，4 \u4e2a\u5b57\u6bb5：<\/p>\n\n\u5b57\u6bb5\u957f\u5ea6\u542b\u4e49\u8981\u70b9<\/tr>\n\n\n\n\n\n
                  \u6e90\u7aef\u53e3<\/td>\n2B<\/td>\n\u53d1\u9001\u65b9\u7aef\u53e3<\/td>\n\u4e0d\u9700\u8981\u56de\u5305\u65f6\u53ef\u4ee5\u586b 0<\/td>\n<\/tr>\n
                  \u76ee\u7684\u7aef\u53e3<\/td>\n2B<\/td>\n\u63a5\u6536\u65b9\u7aef\u53e3<\/td>\n\u4ea4\u4ed8\u7ed9\u54ea\u4e2a\u8fdb\u7a0b<\/td>\n<\/tr>\n
                  \u957f\u5ea6<\/td>\n2B<\/td>\n\u9996\u90e8 + \u6570\u636e\u7684\u603b\u957f<\/td>\n\u6700\u5c0f 8；16 \u4f4d \u2192 \u5355\u4e2a\u6570\u636e\u62a5\u6700\u5927 65535 \u2212 8 = 65527B<\/td>\n<\/tr>\n
                  \u6821\u9a8c\u548c<\/td>\n2B<\/td>\n\u8986\u76d6\u4f2a\u9996\u90e8 + \u9996\u90e8 + \u6570\u636e<\/td>\nIPv4 \u4e0b\u53ef\u586b 0 \u8868\u793a\u300c\u4e0d\u6821\u9a8c\u300d；IPv6 \u4e0b\u5f3a\u5236<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \u5bf9\u6bd4\u4e00\u4e0b\u5c31\u77e5\u9053\u5dee\u8ddd：<\/p>\n\nTCP \u9996\u90e8UDP \u9996\u90e8<\/tr>\n\n\n\n\n
                  \u957f\u5ea6<\/td>\n20~60B<\/td>\n\u56fa\u5b9a 8B<\/td>\n<\/tr>\n
                  \u5b57\u6bb5\u6570<\/td>\n10+<\/td>\n4<\/td>\n<\/tr>\n
                  \u6709\u6ca1\u6709\u5e8f\u53f7\/\u786e\u8ba4\u53f7\/\u7a97\u53e3<\/td>\n\u6709<\/td>\n\u4e00\u4e2a\u90fd\u6ca1\u6709<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  4.2.3 \u6821\u9a8c\u548c\u4e0e\u4f2a\u9996\u90e8<\/h4>\n

                  UDP \u6821\u9a8c\u548c\u7684\u8ba1\u7b97\u8303\u56f4\u662f：<\/p>\n

                  \u4f2a\u9996\u90e8（12B） + UDP \u9996\u90e8（8B） + UDP \u6570\u636e
                  \n\u4f2a\u9996\u90e8 = \u6e90 IP(4B) + \u76ee\u7684 IP(4B) + \u5168 0(1B) + \u534f\u8bae\u53f7 17(1B) + UDP \u957f\u5ea6(2B)<\/p>\n

                  \u4f2a\u9996\u90e8\u4e0d\u771f\u7684\u53d1\u5230\u7ebf\u8def\u4e0a，\u53ea\u5728\u8ba1\u7b97\u6821\u9a8c\u548c\u65f6\u4e34\u65f6\u62fc\u51fa\u6765\u3002\u4e3a\u4ec0\u4e48\u8981\u8fd9\u4e48\u9ebb\u70e6？\u56e0\u4e3a\u8981\u628a IP \u5c42\u7684\u6e90\/\u76ee\u7684\u5730\u5740\u4e5f\u62c9\u8fdb\u6821\u9a8c \u2014\u2014 \u5426\u5219\u4e00\u4e2a\u5305\u88ab\u9519\u8bef\u6295\u9012（NAT \u6539\u5199\u5730\u5740\u540e\u6ca1\u91cd\u7b97\u6821\u9a8c\u548c）\u4e5f\u68c0\u6d4b\u4e0d\u51fa\u6765\u3002<\/p>\n

                  \u4e09\u4e2a\u5fc5\u987b\u77e5\u9053\u7684\u70b9：<\/p>\n

                • IPv4 \u91cc\u6821\u9a8c\u548c\u586b 0 \u662f\u5408\u6cd5\u7684，\u610f\u601d\u662f\u300c\u53d1\u9001\u65b9\u6ca1\u7b97\u6821\u9a8c\u548c\u300d\u3002\u8fd9\u8ba9\u4e2d\u95f4\u8bbe\u5907\u53ef\u4ee5\u5b8c\u5168\u8df3\u8fc7\u6821\u9a8c \u2014\u2014 \u5b89\u5168\u4e0a\u610f\u5473\u7740\u300c\u8f7d\u8377\u5b8c\u6574\u6027\u5b8c\u5168\u4f9d\u8d56\u4e0a\u5c42\u534f\u8bae\u300d\u3002<\/li>\n
                • IPv6 \u91cc\u4e0d\u5141\u8bb8\u586b 0，\u5fc5\u987b\u7b97\u3002<\/li>\n
                • NAT \u7684\u7ecf\u5178\u5751：NAT \u6539\u5199\u4e86\u6e90\/\u76ee\u7684 IP，\u5c31\u5fc5\u987b\u91cd\u7b97 UDP\/TCP \u6821\u9a8c\u548c；\u6709\u7684\u5b9e\u73b0\u5077\u61d2\u4e0d\u91cd\u7b97，\u5bfc\u81f4\u67d0\u4e9b\u4e25\u683c\u6821\u9a8c\u7684\u4e3b\u673a\u4e22\u5305\u3002<\/li>\n

                  4.2.4 \u300c8 \u5b57\u8282\u9996\u90e8\u300d\u610f\u5473\u7740\u4ec0\u4e48<\/h4>\n\n\u7279\u6027\u540e\u679c（\u597d\u5904）\u540e\u679c（\u4ee3\u4ef7 \/ \u653b\u51fb\u9762）<\/tr>\n\n\n\n\n\n\n\n
                  \u9996\u90e8\u53ea\u6709 8B<\/td>\n\u5c0f\u5305\u5f00\u9500\u6781\u4f4e（DNS 40B \u7684\u5305\u91cc\u9996\u90e8\u53ea\u5360 20%）<\/td>\n\u6ca1\u6709\u5e8f\u53f7\/\u786e\u8ba4\u53f7，\u505a\u4e0d\u5230\u53ef\u9760\u4f20\u8f93<\/td>\n<\/tr>\n
                  \u4fdd\u7559\u62a5\u6587\u8fb9\u754c<\/td>\n\u4e00\u6b21 sendto \u5bf9\u5e94\u4e00\u6b21 recvfrom，\u63a5\u6536\u65b9\u62ff\u5230\u5b8c\u6574\u4e00\u6761<\/td>\nTCP \u7684\u300c\u7c98\u5305\u300d\u95ee\u9898\u5728 UDP \u91cc\u4e0d\u5b58\u5728（\u8fd9\u9898\u5e38\u8003）<\/td>\n<\/tr>\n
                  \u65e0\u8fde\u63a5<\/td>\n\u65e0\u63e1\u624b，\u7701 1 \u4e2a RTT；\u670d\u52a1\u7aef\u65e0\u72b6\u6001，DNS \u5355\u673a\u53ef\u625b\u6781\u9ad8 QPS<\/td>\n\u6e90 IP \u4f2a\u9020\u96f6\u6210\u672c \u2192 \u53cd\u5c04\u653e\u5927\u7684\u9996\u9009\u8f7d\u4f53<\/td>\n<\/tr>\n
                  \u65e0\u5e8f\u3001\u65e0\u91cd\u4f20\u3001\u65e0\u6d41\u63a7<\/td>\n\u534f\u8bae\u6808\u5b9e\u73b0\u7b80\u5355，\u65f6\u5ef6\u4f4e（\u8bed\u97f3\/\u6e38\u620f）<\/td>\n\u4e22\u5305\u3001\u4e71\u5e8f\u3001\u91cd\u590d\u5168\u4e0a\u629b\u7ed9\u5e94\u7528\u5c42\u81ea\u5df1\u5904\u7406<\/td>\n<\/tr>\n
                  \u65e0\u62e5\u585e\u63a7\u5236<\/td>\n\u5e94\u7528\u53ef\u4ee5\u6309\u81ea\u5df1\u8282\u594f\u53d1<\/td>\nUDP Flood \u53ea\u9700\u65e0\u8111\u53d1\u5305，\u4e0d\u7528\u7ba1\u7f51\u7edc\u662f\u5426\u62e5\u585e<\/td>\n<\/tr>\n
                  \u8d85\u8fc7 MTU \u7531 IP \u5206\u7247<\/td>\n\u5355\u6761\u6570\u636e\u62a5\u53ef\u4ee5\u5f88\u5927<\/td>\n\u4e22\u4e00\u4e2a\u5206\u7247，\u6574\u6761\u6570\u636e\u62a5\u5168\u5e9f，\u4e14\u5e94\u7528\u5c42\u4e0d\u4f1a\u81ea\u52a8\u91cd\u4f20<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \"image-20261104112319470\"<\/p>\n

                  \u7b2c 1 \u7247 off=0 \u5e26 More fragments，\u7b2c 2 \u7247 off=185（185\u00d78 = 1480 \u5b57\u8282\u504f\u79fb）\u6536\u5c3e；\u70b9\u5f00\u7b2c 2 \u7247\u770b UDP \u957f\u5ea6\u5b57\u6bb5\u5199\u7684\u662f Length: 2008，\u53ef\u8fd9\u4e00\u5e27\u53ea\u6709 562 \u5b57\u8282 \u2014\u2014 \u5dee\u7684\u90a3 1480 \u5b57\u8282\u5728\u7b2c 1 \u7247\u91cc\u3002\u4e2d\u95f4\u4e22\u4efb\u4f55\u4e00\u7247，\u63a5\u6536\u7aef\u90fd\u62fc\u4e0d\u51fa\u8fd9\u6761\u6570\u636e\u62a5，\u800c UDP \u81ea\u5df1\u4e0d\u4f1a\u91cd\u4f20，\u53ea\u80fd\u9760\u5e94\u7528\u5c42\u8d85\u65f6\u91cd\u53d1\u3002<\/p>\n

                  4.2.5 UDP \u6293\u5305：\u4e00\u6b21 DNS \u67e5\u8be2<\/h4>\n

                  \u60f3\u770b UDP，\u6700\u65b9\u4fbf\u7684\u4f8b\u5b50\u5c31\u662f DNS\u3002\u4e00\u6761\u547d\u4ee4\u5c31\u591f：<\/p>\n

                  nslookup example.<\/span>com # \u89e6\u53d1\u4e00\u6b21 UDP 53 \u67e5\u8be2<\/span><\/p>\n

                  Wireshark \u8fc7\u6ee4\u5668：<\/p>\n

                  udp.port == 53<\/p>\n

                  \u6293\u5230\u7684\u5e94\u8be5\u662f\u8fd9\u6837\u4e24\u4e2a\u5305（\u4e00\u5f80\u4e00\u8fd4，\u6ca1\u6709\u4efb\u4f55\u63e1\u624b\u548c\u786e\u8ba4）：<\/p>\n\n#\u65b9\u5411\u534f\u8bae\u5173\u952e\u5b57\u6bb5\u8bf4\u660e<\/tr>\n\n\n\n
                  1<\/td>\n\u5ba2\u6237\u7aef:\u968f\u673a\u9ad8\u4f4d\u7aef\u53e3 \u2192 DNS:53<\/td>\nDNS<\/td>\nTransaction ID = 0x8f3a，Queries = 1，A? example.com<\/td>\n\u53ea\u6709 8B UDP \u5934 + \u4e00\u4e2a DNS \u67e5\u8be2<\/td>\n<\/tr>\n
                  2<\/td>\nDNS:53 \u2192 \u5ba2\u6237\u7aef:\u968f\u673a\u9ad8\u4f4d\u7aef\u53e3<\/td>\nDNS<\/td>\n\u540c Transaction ID，Answers = 1，A 93.184.216.34<\/td>\n\u7aef\u53e3\u5bf9\u8c03，ID \u5fc5\u987b\u4e00\u81f4\u624d\u7b97\u300c\u8fd9\u662f\u5bf9\u521a\u624d\u90a3\u4e2a\u67e5\u8be2\u7684\u56de\u7b54\u300d<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \"image-20261104103406922\"<\/p>\n

                  \u4e0a\u56fe\u5de6\u534a\u662f 4.1 \u8282\u90a3\u6761 HTTP \u8fde\u63a5\u7684\u5b8c\u6574\u8fc7\u7a0b（\u63e1\u624b 3 \u5305 + \u6570\u636e 2 \u5305 + \u6325\u624b 3 \u5305），\u53f3\u534a\u662f\u8fd9\u6761 DNS \u67e5\u8be2 \u2014\u2014 \u603b\u5171\u5c31 2 \u4e2a\u5305，\u95ee\u548c\u7b54，\u5b8c\u4e86\u3002\u8fd9\u5c31\u662f\u300c\u65e0\u8fde\u63a5\u300d\u6700\u76f4\u89c2\u7684\u6837\u5b50\u3002<\/p>\n

                  \u518d\u8865\u4e00\u5f20\u771f\u6b63\u6293\u4e0b\u6765\u7684（\u672c\u673a 10.41.231.117，\u6821\u56ed\u7f51 DNS 10.41.231.140:53，nslookup www.hust.edu.cn）：<\/p>\n

                  \"image-20261104112303223\"<\/p>\n

                  \u7b2c 3 \u6761\u662f\u67e5\u8be2\u3001\u7b2c 4 \u6761\u662f\u54cd\u5e94，\u65f6\u95f4\u5dee\u53ea\u6709 0.7 ms；\u4e0b\u65b9\u9762\u677f\u628a UDP \u9996\u90e8 4 \u4e2a\u5b57\u6bb5\u548c DNS \u5934\u90fd\u5c55\u5f00\u4e86，\u548c 4.2.2 \u7684\u7ed3\u6784\u56fe\u4e00\u4e00\u5bf9\u5e94：<\/p>\n\n\u4f4d\u7f6e\u6293\u5305\u91cc\u770b\u5230\u5bf9\u5e94\u54ea\u4e2a\u5b57\u6bb5<\/tr>\n\n\n\n\n\n\n\n\n\n
                  UDP<\/td>\nSrc Port: 55884 \/ Dst Port: 53<\/td>\n\u6e90\u7aef\u53e3（\u5ba2\u6237\u7aef\u968f\u673a\u9ad8\u4f4d\u7aef\u53e3）\u3001\u76ee\u7684\u7aef\u53e3（DNS \u670d\u52a1）<\/td>\n<\/tr>\n
                  UDP<\/td>\nLength: 41<\/td>\n\u9996\u90e8 8B + \u8f7d\u8377 33B = 41<\/td>\n<\/tr>\n
                  UDP<\/td>\nChecksum: 0x9820 [unverified]<\/td>\n\u6821\u9a8c\u548c；unverified \u662f\u7f51\u5361\u300c\u6821\u9a8c\u548c\u5378\u8f7d\u300d\u5bfc\u81f4，\u4e0d\u662f\u6293\u5305\u51fa\u9519<\/td>\n<\/tr>\n
                  DNS<\/td>\nTransaction ID: 0x0002<\/td>\n\u8bf7\u6c42\u4e0e\u54cd\u5e94\u9760\u5b83\u914d\u5bf9<\/td>\n<\/tr>\n
                  DNS<\/td>\nFlags: 0x0100 Standard query<\/td>\nQR=0 \u67e5\u8be2，RD=1 \u5e0c\u671b\u9012\u5f52<\/td>\n<\/tr>\n
                  DNS<\/td>\nQuestions: 1 \/ Answer RRs: 0<\/td>\n\u67e5\u8be2\u62a5\u6587\u6ca1\u6709\u56de\u7b54\u6bb5<\/td>\n<\/tr>\n
                  DNS<\/td>\nwww.hust.edu.cn: type A, class IN<\/td>\n\u95ee\u7684\u662f A \u8bb0\u5f55<\/td>\n<\/tr>\n
                  DNS<\/td>\n[Response In: 4]<\/td>\nWireshark \u81ea\u52a8\u5173\u8054\u5230\u7b2c 4 \u6761：A 202.114.0.245，91 \u5b57\u8282<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \u4e09\u4e2a\u503c\u5f97\u6ce8\u610f\u7684\u70b9：\u2460 \u6574\u6761\u4ea4\u4e92\u53ea\u6709 2 \u4e2a\u5305，\u6ca1\u6709\u5efa\u7acb\/\u786e\u8ba4\/\u91ca\u653e；\u2461 \u54cd\u5e94\u6bd4\u8bf7\u6c42\u5927（91B vs 75B），\u8fd9\u4e2a\u6bd4\u4f8b\u5230\u4e86\u53cd\u5c04\u653e\u5927\u91cc\u4f1a\u88ab\u653e\u5927\u5230\u6210\u5343\u4e0a\u4e07\u500d；\u2462 \u5217\u8868\u91cc\u7b2c 1~24 \u6761\u90fd\u662f\u540c\u4e00\u65f6\u6bb5\u7684\u5176\u5b83 DNS \u67e5\u8be2，\u53ea\u6709\u7b2c 3\u30014 \u6761\u662f\u8fd9\u6b21 nslookup\u3002<\/p>\n

                  4.2.6 \u8dd1\u5728 UDP \u4e0a\u7684\u5e38\u89c1\u534f\u8bae<\/h4>\n\n\u7aef\u53e3\u534f\u8bae\u4e3a\u4ec0\u4e48\u7528 UDP<\/tr>\n\n\n\n\n\n\n\n\n\n\n\n\n
                  53<\/td>\nDNS（\u4e3b）\/ mDNS 5353<\/td>\n\u4e00\u95ee\u4e00\u7b54\u3001\u62a5\u6587\u5c0f\u3001\u8981\u6c42\u5feb；\u8d85 512B \u6216\u533a\u57df\u4f20\u9001\u624d\u8d70 TCP<\/td>\n<\/tr>\n
                  67 \/ 68<\/td>\nDHCP（\u670d\u52a1\u7aef \/ \u5ba2\u6237\u7aef）<\/td>\n\u5ba2\u6237\u7aef\u6b64\u65f6\u8fd8\u6ca1\u6709 IP，\u53ea\u80fd\u5e7f\u64ad，\u65e0\u6cd5\u5efa TCP \u8fde\u63a5<\/td>\n<\/tr>\n
                  69<\/td>\nTFTP<\/td>\n\u6781\u7b80\u5b9e\u73b0（\u4ea4\u6362\u673a\u5237\u56fa\u4ef6）<\/td>\n<\/tr>\n
                  123<\/td>\nNTP<\/td>\n\u65f6\u95f4\u540c\u6b65\u8981\u6c42\u4f4e\u65f6\u5ef6，\u4e00\u6b21\u5f80\u8fd4\u5c31\u591f<\/td>\n<\/tr>\n
                  161 \/ 162<\/td>\nSNMP \/ SNMP Trap<\/td>\n\u8f6e\u8be2\u5f0f\u7ba1\u7406，\u7b80\u5355<\/td>\n<\/tr>\n
                  500 \/ 4500<\/td>\nIKE \/ IPsec NAT-T<\/td>\n\u96a7\u9053\u534f\u5546<\/td>\n<\/tr>\n
                  3478 \/ 5349<\/td>\nSTUN \/ TURN<\/td>\nNAT \u7a7f\u900f，\u6253\u6d1e\u5fc5\u987b UDP<\/td>\n<\/tr>\n
                  1900 \/ 5353<\/td>\nSSDP \/ mDNS<\/td>\n\u5c40\u57df\u7f51\u670d\u52a1\u53d1\u73b0，\u9760\u7ec4\u64ad<\/td>\n<\/tr>\n
                  5060<\/td>\nSIP<\/td>\n\u8bed\u97f3\u4fe1\u4ee4，\u91cd\u4f20\u81ea\u5df1\u5b9e\u73b0<\/td>\n<\/tr>\n
                  443<\/td>\nQUIC（HTTP\/3）<\/td>\n\u5728\u7528\u6237\u6001\u81ea\u5df1\u5b9e\u73b0\u53ef\u9760\u4f20\u8f93，\u7ed5\u5f00 TCP \u961f\u5934\u963b\u585e<\/td>\n<\/tr>\n
                  11211<\/td>\nmemcached<\/td>\n\u7f13\u5b58\u67e5\u8be2；\u516c\u7f51\u66b4\u9732\u5c31\u662f\u707e\u96be\u7ea7\u653e\u5927\u5668<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  4.2.7 \u7f3a\u9677<\/h4>\n
                • \u65e0\u8fde\u63a5\u3001\u65e0\u72b6\u6001 \u2192 \u670d\u52a1\u7aef\u6ca1\u6709\u4efb\u4f55\u624b\u6bb5\u9a8c\u8bc1\u6e90 IP \u662f\u771f\u7684（TCP \u81f3\u5c11\u8981\u7528 SYN Cookie \u505a\u4e00\u6b21\u5f80\u8fd4）\u3002\u8fd9\u662f UDP \u4e00\u5207\u653e\u5927\u653b\u51fb\u7684\u6839\u56e0\u3002<\/li>\n
                • \u65e0\u8ba4\u8bc1\u3001\u65e0\u52a0\u5bc6 \u2192 \u8f7d\u8377\u660e\u6587\u53ef\u8bfb\u53ef\u6539（DNS \u6295\u6bd2\u3001DHCP \u4f2a\u9020\u3001TFTP \u4efb\u610f\u8bfb\u6587\u4ef6）\u3002<\/li>\n
                • \u65e0\u901f\u7387\u63a7\u5236\u3001\u65e0\u62e5\u585e\u63a7\u5236 \u2192 \u53d1\u9001\u65b9\u60f3\u53d1\u591a\u5feb\u5c31\u591a\u5feb，\u76f4\u63a5\u6253\u6ee1\u5e26\u5bbd\u548c\u7f51\u5361\u4e2d\u65ad（pps \u6253\u6ee1\u6bd4\u5e26\u5bbd\u6253\u6ee1\u66f4\u81f4\u547d）\u3002<\/li>\n
                • \u6821\u9a8c\u548c\u53ef\u5173（IPv4） \u2192 \u8f7d\u8377\u5b8c\u6574\u6027\u6ca1\u6709\u4e0b\u9650\u4fdd\u8bc1\u3002<\/li>\n
                • \u65e0\u5206\u7247\u611f\u77e5 \u2192 \u5927 UDP \u5305\u88ab IP \u5206\u7247\u540e，\u653b\u51fb\u8005\u53ef\u4ee5\u7528\u7578\u5f62\u5206\u7247\u7ed5\u8fc7\u68c0\u6d4b\u6216\u6253\u5d29\u91cd\u7ec4\u903b\u8f91\u3002<\/li>\n

                  4.2.8 \u5229\u7528<\/h4>\n

                  \u2460 UDP Flood（\u76f4\u63a5\u6d2a\u6cdb）<\/p>\n

                  \u4f2a\u9020\u6e90 IP \u5411\u76ee\u6807\u7684\u5927\u91cf\u7aef\u53e3\u53d1\u9001 UDP \u5305 \u2192 \u76ee\u6807\u4e3b\u673a\u8981\u4e48\u5904\u7406，\u8981\u4e48\u56de ICMP \u7aef\u53e3\u4e0d\u53ef\u8fbe（\u8fd9\u53c8\u6d88\u8017\u4e00\u4efd\u8d44\u6e90）\u2192 \u5e26\u5bbd\u548c pps \u88ab\u6253\u6ee1\u3002<\/p>\n

                  \u53d8\u79cd Fraggle：\u628a UDP \u5305\u53d1\u5230\u5e7f\u64ad\u5730\u5740\u7684 echo(7) \/ chargen(19) \u7aef\u53e3，\u6574\u4e2a\u5b50\u7f51\u7684\u4e3b\u673a\u90fd\u56de\u5305 \u2192 1 \u4e2a\u5305\u53d8 N \u4e2a（\u548c ICMP \u7684 Smurf \u662f\u540c\u4e00\u4e2a\u601d\u8def）\u3002<\/p>\n

                  \u2461 \u53cd\u5c04\u653e\u5927（Reflection & Amplification）\u2014\u2014 UDP \u6700\u5371\u9669\u7684\u7528\u6cd5<\/p>\n

                  \u4e09\u6b65\u94fe\u6761：<\/p>\n

                  \u2460 \u653b\u51fb\u8005\u4f2a\u9020\u6e90 IP = \u53d7\u5bb3\u8005\u5730\u5740
                  \n\u2461 \u5411\u5927\u91cf\u300c\u5f00\u653e\u670d\u52a1\u300d\u53d1\u9001\u5c0f\u8bf7\u6c42（\u8fd9\u4e9b\u670d\u52a1\u7684\u54cd\u5e94\u5f88\u5927）
                  \n\u2462 \u6240\u6709\u54cd\u5e94\u90fd\u6253\u5230\u53d7\u5bb3\u8005\u8eab\u4e0a \u2192 \u653e\u5927\u500d\u6570 = \u54cd\u5e94\u5927\u5c0f \/ \u8bf7\u6c42\u5927\u5c0f<\/p>\n\n\u53cd\u5c04\u6e90\u7aef\u53e3\u653e\u5927\u500d\u6570（\u516c\u5f00\u6d4b\u91cf\u4e2d\u7684\u5e38\u89c1\u91cf\u7ea7）\u5907\u6ce8<\/tr>\n\n\n\n\n\n\n\n\n
                  memcached<\/td>\n11211<\/td>\n\u6570\u5343\u5230\u6570\u4e07\u500d<\/td>\n\u6700\u731b，2018 \u5e74 GitHub 1.35 Tbps \u653b\u51fb\u5c31\u662f\u5b83<\/td>\n<\/tr>\n
                  NTP（monlist）<\/td>\n123<\/td>\n\u6570\u767e\u500d<\/td>\n\u8001\u7248\u672c NTP \u7684 monlist \u4f1a\u8fd4\u56de\u6700\u8fd1 600 \u4e2a\u5ba2\u6237\u7aef<\/td>\n<\/tr>\n
                  CLDAP<\/td>\n389<\/td>\n\u6570\u5341\u500d<\/td>\nLDAP \u7684 UDP \u7248<\/td>\n<\/tr>\n
                  DNS<\/td>\n53<\/td>\n\u6570\u5341\u500d<\/td>\n\u9700\u8981\u5f00\u653e\u9012\u5f52\u89e3\u6790\u5668；ANY \u67e5\u8be2\u3001DNSSEC \u54cd\u5e94\u66f4\u5927<\/td>\n<\/tr>\n
                  SSDP<\/td>\n1900<\/td>\n\u6570\u5341\u500d<\/td>\nUPnP \u8bbe\u5907\u53d1\u73b0<\/td>\n<\/tr>\n
                  SNMP<\/td>\n161<\/td>\n\u6570\u500d~\u6570\u5341\u500d<\/td>\n\u9ed8\u8ba4\u53e3\u4ee4 public \u5c31\u80fd\u67e5\u5927\u91cf\u4fe1\u606f<\/td>\n<\/tr>\n
                  Chargen<\/td>\n19<\/td>\n\u6570\u767e\u500d<\/td>\n\u6bcf\u5305\u56de\u968f\u673a\u5b57\u7b26\u6d41<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                  \u26a0\ufe0f \u4e0a\u8868\u7684\u500d\u6570\u968f\u914d\u7f6e\u3001\u54cd\u5e94\u5185\u5bb9\u3001\u8bf7\u6c42\u6784\u9020\u53d8\u5316\u5f88\u5927，\u5199\u8bba\u6587\/\u7b54\u9898\u65f6\u5e94\u8868\u8ff0\u4e3a\u300c\u91cf\u7ea7\u300d\u800c\u975e\u7cbe\u786e\u503c\u3002<\/p>\n

                  \u4e3a\u4ec0\u4e48\u5fc5\u987b\u662f UDP？ \u56e0\u4e3a TCP \u8981\u4e09\u6b21\u63e1\u624b \u2014\u2014 \u4f2a\u9020\u6e90 IP \u5c31\u6536\u4e0d\u5230 SYN+ACK，\u8fde\u63a5\u6839\u672c\u5efa\u4e0d\u8d77\u6765，\u65e0\u6cd5\u5f62\u6210\u653e\u5927\u3002UDP \u65e0\u8fde\u63a5，\u4e00\u4e2a\u5305\u5c31\u80fd\u89e6\u53d1\u4e00\u4e2a\u5927\u54cd\u5e94\u3002 \u8fd9\u4e00\u53e5\u662f\u8fd9\u7c7b\u9898\u7684\u6807\u51c6\u7b54\u6848\u3002<\/p>\n

                  \u2462 UDP \u5206\u7247\u653b\u51fb<\/p>\n

                    \n
                  • \u6784\u9020\u603b\u957f > 65535 \u6216\u5206\u7247\u504f\u79fb\u91cd\u53e0\u7684 UDP \u5305，\u6253\u8001\u7cfb\u7edf\u91cd\u7ec4\u903b\u8f91（Teardrop \u7684 UDP \u7248\u672c）；<\/li>\n
                  • \u628a\u653b\u51fb\u8f7d\u8377\u62c6\u5230\u591a\u4e2a\u5206\u7247，\u8ba9\u53ea\u505a\u9010\u5305\u5339\u914d\u7684 IDS \u6f0f\u68c0\u3002<\/li>\n<\/ul>\n

                    \u2463 UDP \u96a7\u9053 \/ \u6570\u636e\u6e17\u51fa<\/p>\n

                    \u628a\u5176\u4ed6\u534f\u8bae\u5c01\u88c5\u8fdb UDP \u8f7d\u8377（DNS over UDP 53\u3001NTP\u3001\u751a\u81f3 53 \u7aef\u53e3\u8dd1\u81ea\u5b9a\u4e49\u534f\u8bae），\u7a7f\u51fa\u9632\u706b\u5899\u3002\u56e0\u4e3a\u300c53 \u7aef\u53e3\u5fc5\u987b\u653e\u884c\u300d\u662f\u5f88\u591a\u5185\u7f51\u7684\u505a\u6cd5\u3002<\/p>\n

                    \u2464 UDP \u626b\u63cf<\/p>\n

                    UDP \u6ca1\u6709\u63e1\u624b，\u626b\u63cf\u5668\u53d1\u4e00\u4e2a\u7a7a\u5305，\u7b49 ICMP \u7aef\u53e3\u4e0d\u53ef\u8fbe（Type 3 Code 3）：\u6536\u5230 \u2192 \u7aef\u53e3\u5173\u95ed；\u6ca1\u6536\u5230 \u2192 \u7aef\u53e3\u53ef\u80fd\u5f00\u7740（\u4e5f\u53ef\u80fd\u88ab\u9632\u706b\u5899\u9759\u9ed8\u4e22\u5f03，\u6240\u4ee5 UDP \u626b\u63cf\u53c8\u6162\u53c8\u4e0d\u51c6，nmap -sU \u9700\u8981\u91cd\u8bd5）\u3002<\/p>\n

                    \u2465 QUIC \u5e26\u6765\u7684\u65b0\u95ee\u9898<\/p>\n

                    HTTP\/3 \u8dd1\u5728 UDP 443 \u4e0a，\u8f7d\u8377\u5168\u7a0b TLS 1.3 \u52a0\u5bc6，\u4e2d\u95f4\u8bbe\u5907\u770b\u4e0d\u5230 SNI \u4e4b\u5916\u7684\u4efb\u4f55\u4e1c\u897f，\u4f20\u7edf\u57fa\u4e8e TCP \u660e\u6587\u7279\u5f81\u7684 IDS \u76f4\u63a5\u5931\u6548 \u2192 \u53ea\u80fd\u9760\u6d41\u91cf\u884c\u4e3a\u7279\u5f81（\u5305\u957f\u5206\u5e03\u3001\u65f6\u5e8f）\u8bc6\u522b\u3002\u8fd9\u548c\u4f60\u505a\u6d41\u91cf\u5206\u7c7b\u662f\u76f4\u63a5\u76f8\u5173\u7684\u70b9\u3002<\/p>\n

                    4.2.9 \u9632\u5fa1<\/h4>\n\n\u5c42\u9762\u624b\u6bb5<\/tr>\n\n\n\n\n\n\n
                    \u6839\u6cbb<\/td>\n\u5165\u53e3\u8fc7\u6ee4（BCP 38 \/ uRPF）：\u8fd0\u8425\u5546\u4fa7\u4e22\u5f03\u6e90 IP \u4e0d\u5c5e\u4e8e\u672c\u7f51\u6bb5\u7684\u5305 \u2192 \u4ece\u6e90\u5934\u6d88\u706d\u4f2a\u9020\u6e90 IP<\/td>\n<\/tr>\n
                    \u670d\u52a1\u4fa7<\/td>\n\u5173\u95ed\u516c\u7f51\u66b4\u9732\u7684\u5f00\u653e\u9012\u5f52 DNS\u3001NTP monlist\u3001memcached\u3001SNMP \u9ed8\u8ba4\u53e3\u4ee4<\/td>\n<\/tr>\n
                    \u7f51\u7edc\u4fa7<\/td>\n\u6bcf\u6e90 IP \u7684 pps\/\u5e26\u5bbd\u9650\u901f\u3001ANY \u67e5\u8be2\u9650\u6d41\u3001\u5206\u7247\u7b56\u7565（\u4e22\u5f03\u5f02\u5e38\/\u5fae\u5c0f\u5206\u7247）<\/td>\n<\/tr>\n
                    \u5e94\u7528\u4fa7<\/td>\nDNSSEC（\u9632\u6295\u6bd2）\u3001DoH\/DoT（\u52a0\u5bc6）\u3001QUIC \u81ea\u5e26 TLS 1.3<\/td>\n<\/tr>\n
                    \u76d1\u6d4b<\/td>\n\u5165\u5411\u5927\u5305\u7a81\u589e\u3001\u5355\u4e00\u76ee\u7684\u7aef\u53e3 pps \u7a81\u589e\u3001\u54cd\u5e94\u5305 >> \u8bf7\u6c42\u5305\u7684\u6d41\u91cf\u6a21\u5f0f<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                    \u4e00\u53e5\u8bdd：UDP \u7684\u9632\u5fa1\u91cd\u70b9\u4e0d\u5728\u300c\u534f\u8bae\u5185\u90e8\u300d（\u5b83\u4ec0\u4e48\u90fd\u6ca1\u6709），\u800c\u5728\u8fb9\u754c\u8fc7\u6ee4 + \u670d\u52a1\u914d\u7f6e + \u901f\u7387\u9650\u5236\u3002<\/p>\n

                    4.2.10 TCP \u4e0e UDP \u9010\u9879\u5bf9\u6bd4<\/h4>\n\n\u7ef4\u5ea6TCPUDP<\/tr>\n\n\n\n\n\n\n\n\n\n\n\n\n\n
                    \u8fde\u63a5<\/td>\n\u4e09\u6b21\u63e1\u624b \/ \u56db\u6b21\u6325\u624b<\/td>\n\u65e0\u8fde\u63a5<\/td>\n<\/tr>\n
                    \u53ef\u9760\u6027<\/td>\n\u786e\u8ba4 + \u8d85\u65f6\u91cd\u4f20<\/td>\n\u65e0<\/td>\n<\/tr>\n
                    \u987a\u5e8f<\/td>\n\u6709\u5e8f，\u4e71\u5e8f\u91cd\u6392<\/td>\n\u65e0<\/td>\n<\/tr>\n
                    \u6570\u636e\u8fb9\u754c<\/td>\n\u5b57\u8282\u6d41（\u6709\u7c98\u5305\u95ee\u9898）<\/td>\n\u4fdd\u7559\u62a5\u6587\u8fb9\u754c<\/td>\n<\/tr>\n
                    \u9996\u90e8\u5f00\u9500<\/td>\n20~60B<\/td>\n8B<\/td>\n<\/tr>\n
                    \u6d41\u91cf\u63a7\u5236<\/td>\n\u6ed1\u52a8\u7a97\u53e3<\/td>\n\u65e0<\/td>\n<\/tr>\n
                    \u62e5\u585e\u63a7\u5236<\/td>\n\u6162\u542f\u52a8 \/ CUBIC \/ BBR<\/td>\n\u65e0（QUIC \u5728\u7528\u6237\u6001\u81ea\u5df1\u5b9e\u73b0）<\/td>\n<\/tr>\n
                    \u4f20\u8f93\u65b9\u5f0f<\/td>\n\u70b9\u5bf9\u70b9（\u4e0d\u652f\u6301\u5e7f\u64ad\/\u7ec4\u64ad）<\/td>\n\u652f\u6301\u5e7f\u64ad\u3001\u7ec4\u64ad<\/td>\n<\/tr>\n
                    \u5efa\u8fde\u5f00\u9500<\/td>\n1 \u4e2a RTT<\/td>\n0<\/td>\n<\/tr>\n
                    \u5178\u578b\u5e94\u7528<\/td>\nHTTP\/1.1\u3001SSH\u3001SMTP\u3001FTP<\/td>\nDNS\u3001DHCP\u3001NTP\u3001\u8bed\u97f3\u3001\u6e38\u620f\u3001QUIC<\/td>\n<\/tr>\n
                    \u4e3b\u8981\u653b\u51fb<\/td>\nSYN Flood\u3001\u4f1a\u8bdd\u52ab\u6301\u3001RST \u6ce8\u5165<\/td>\nUDP Flood\u3001\u53cd\u5c04\u653e\u5927\u3001\u5206\u7247\u653b\u51fb<\/td>\n<\/tr>\n
                    \u4e00\u53e5\u8bdd\u6bd4\u55bb<\/td>\n\u6253\u7535\u8bdd：\u5148\u63a5\u901a，\u786e\u8ba4\u5bf9\u65b9\u5728\u542c<\/td>\n\u5bc4\u660e\u4fe1\u7247：\u5199\u597d\u5c31\u6295，\u4e22\u4e0d\u4e22\u4e0d\u7ba1<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                    4.2.11 \u4e3a\u4ec0\u4e48 DNS \u7528 UDP\u3001HTTP \u7528 TCP<\/h4>\n\n\u5224\u65ad\u4f9d\u636eDNSHTTP<\/tr>\n\n\n\n\n\n\n
                    \u5355\u6b21\u6570\u636e\u91cf<\/td>\n\u5c0f（\u901a\u5e38 < 512B）<\/td>\n\u5927（\u9875\u9762\u3001\u56fe\u7247\u3001JSON）<\/td>\n<\/tr>\n
                    \u4ea4\u4e92\u6a21\u5f0f<\/td>\n\u4e00\u95ee\u4e00\u7b54\u5c31\u7ed3\u675f<\/td>\n\u957f\u8fde\u63a5\u3001\u8fde\u7eed\u591a\u8f6e<\/td>\n<\/tr>\n
                    \u80fd\u5426\u5bb9\u5fcd\u4e22\u5305<\/td>\n\u80fd（\u8d85\u65f6\u91cd\u53d1\u4e00\u6b21\u5373\u53ef）<\/td>\n\u4e0d\u80fd（\u5185\u5bb9\u5fc5\u987b\u5b8c\u6574）<\/td>\n<\/tr>\n
                    \u5ef6\u8fdf\u654f\u611f\u5ea6<\/td>\n\u6781\u9ad8（\u6bcf\u6b21\u4e0a\u7f51\u7b2c\u4e00\u6b65，\u591a 1 RTT \u5c31\u5f88\u660e\u663e）<\/td>\n\u76f8\u5bf9\u4f4e<\/td>\n<\/tr>\n
                    \u7ed3\u8bba<\/td>\nUDP \u4e3a\u4e3b，\u5fc5\u8981\u65f6\u964d\u7ea7\u5230 TCP<\/td>\nTCP \u4e3a\u4e3b<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                    DNS \u7684\u300c\u5fc5\u8981\u65f6\u8d70 TCP\u300d\u6709\u4e09\u4e2a\u89e6\u53d1\u6761\u4ef6，\u8003\u8bd5\u5e38\u8003：<\/p>\n

                  • \u54cd\u5e94\u8d85\u8fc7 512 \u5b57\u8282（\u672a\u542f\u7528 EDNS0）\u2192 \u670d\u52a1\u5668\u628a\u54cd\u5e94\u622a\u65ad，\u7f6e TC=1 \u6807\u5fd7 \u2192 \u5ba2\u6237\u7aef\u6539\u7528 TCP \u91cd\u67e5；<\/li>\n
                  • \u533a\u57df\u4f20\u9001（AXFR \/ IXFR，\u4e3b\u4ece\u540c\u6b65）\u2192 \u5fc5\u987b TCP；<\/li>\n
                  • \u542f\u7528\u4e86 EDNS0（\u53ef\u5230 4096B）\u4ecd\u8d85\u957f\u65f6，\u540c\u6837\u56de\u843d\u5230 TCP\u3002<\/li>\n
                    \n
                    \n

                    \u4e0b\u4e00\u7bc7：\u5e94\u7528\u5c42\u4e0e\u5b89\u5168\u89c6\u89d2<\/h3>\n

                    \u300a\u7f51\u7edc\u534f\u8bae\u5b89\u5168\u7b14\u8bb0（\u4e0b）：\u5e94\u7528\u5c42\u4e0e\u5b89\u5168\u89c6\u89d2\u300b\u63a5\u7740\u8bb2：<\/p>\n

                      \n
                    • HTTP \/ DNS \/ TLS \/ HTTPS \/ DHCP \/ SSH \u7684\u62a5\u6587\u7ed3\u6784\u4e0e\u539f\u751f\u7f3a\u9677（TLS \u7684 SNI \u4e3a\u4ec0\u4e48\u662f\u660e\u6587\u3001DNS \u6295\u6bd2\u600e\u4e48\u53d1\u751f\u3001\u4f2a\u9020 DHCP \u670d\u52a1\u5668\u4e3a\u4ec0\u4e48\u80fd\u4e00\u6b21\u52ab\u6301\u6574\u4e2a\u7f51\u6bb5）<\/li>\n
                    • \u4e00\u5f20\u300c\u653b\u51fb\u9762\u603b\u8868\u300d，\u628a 10 \u4e2a\u534f\u8bae\u7684\u7f3a\u9677\u3001\u5178\u578b\u653b\u51fb\u3001\u9632\u5fa1\u5bf9\u4e0a\u53f7<\/li>\n
                    • \u300c\u660e\u6587\u4e0e\u5bc6\u6587\u8fb9\u754c\u300d：\u666e\u901a\u94fe\u8def \/ HTTPS \/ IPSec \u96a7\u9053 \/ GRE \u96a7\u9053 \u56db\u79cd\u60c5\u51b5，\u94fe\u8def\u4e0a\u5230\u5e95\u8c01\u770b\u5f97\u89c1\u4ec0\u4e48<\/li>\n
                    • \u300c\u6293\u5305\u6392\u9519\u6e05\u5355\u300d：\u770b\u5230 Retransmission\u3001Port unreachable\u3001Fragmented IP protocol \u5206\u522b\u8bf4\u660e\u4ec0\u4e48\u95ee\u9898，\u4ee5\u53ca\u6bcf\u5f20\u56fe\u7684\u590d\u73b0\u547d\u4ee4<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

                      \/* MD \/ \u5bcc\u6587\u672c\u4e2d\u7684 .toc\uff08\u542b\u535a\u5ba2\u56ed\u642c\u5bb6\u7b49\u5d4c\u5957\u7ed3\u6784\uff09\uff1b.toc-box \u5728\u4fa7\u680f\uff0c\u4e0d\u53d7\u5f71\u54cd *\/#content_views .toc,\/* \u7f16\u8f91\u5668\u5e38\u5728\u76ee\u5f55\u524d\u540e\u63d2\u5165\u7a7a p\uff08:empty \u4ecd\u5360 20px\uff09\uff0c\u4e00\u5e76\u53bb\u6389\u907f\u514d\u9876\u7a7a\u9699 *\/#content_views.markdown_views > p:empty:has(+ .toc),#content_views.markdown_views > .toc + p:empty,\/* \u5bcc\u6587\u672c\u65e7\u7248\u76ee\u5f55\u6807\u8bb0 *\/#content<\/p>\n","protected":false},"author":2,"featured_media":123225,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[61,305,191],"topic":[],"class_list":["post-123238","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-61","tag-305","tag-191"],"yoast_head":"\n\u7f51\u7edc\u534f\u8bae\u5b89\u5168\u7b14\u8bb0\uff08\u4e0a\uff09\uff1a\u94fe\u8def\u5c42\u5230\u4f20\u8f93\u5c42 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/123238.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u7f51\u7edc\u534f\u8bae\u5b89\u5168\u7b14\u8bb0\uff08\u4e0a\uff09\uff1a\u94fe\u8def\u5c42\u5230\u4f20\u8f93\u5c42 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\/* MD \/ \u5bcc\u6587\u672c\u4e2d\u7684 .toc\uff08\u542b\u535a\u5ba2\u56ed\u642c\u5bb6\u7b49\u5d4c\u5957\u7ed3\u6784\uff09\uff1b.toc-box \u5728\u4fa7\u680f\uff0c\u4e0d\u53d7\u5f71\u54cd *\/#content_views .toc,\/* \u7f16\u8f91\u5668\u5e38\u5728\u76ee\u5f55\u524d\u540e\u63d2\u5165\u7a7a p\uff08:empty \u4ecd\u5360 20px\uff09\uff0c\u4e00\u5e76\u53bb\u6389\u907f\u514d\u9876\u7a7a\u9699 *\/#content_views.markdown_views > p:empty:has(+ .toc),#content_views.markdown_views > .toc + p:empty,\/* \u5bcc\u6587\u672c\u65e7\u7248\u76ee\u5f55\u6807\u8bb0 *\/#content\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/123238.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-06T13:49:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/11\/20261106134848-6aeddac0b60cd.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/123238.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/123238.html\",\"name\":\"\u7f51\u7edc\u534f\u8bae\u5b89\u5168\u7b14\u8bb0\uff08\u4e0a\uff09\uff1a\u94fe\u8def\u5c42\u5230\u4f20\u8f93\u5c42 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-11-06T13:49:08+00:00\",\"dateModified\":\"2026-11-06T13:49:08+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/123238.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/123238.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/123238.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u7f51\u7edc\u534f\u8bae\u5b89\u5168\u7b14\u8bb0\uff08\u4e0a\uff09\uff1a\u94fe\u8def\u5c42\u5230\u4f20\u8f93\u5c42\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u7f51\u7edc\u534f\u8bae\u5b89\u5168\u7b14\u8bb0\uff08\u4e0a\uff09\uff1a\u94fe\u8def\u5c42\u5230\u4f20\u8f93\u5c42 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/123238.html","og_locale":"zh_CN","og_type":"article","og_title":"\u7f51\u7edc\u534f\u8bae\u5b89\u5168\u7b14\u8bb0\uff08\u4e0a\uff09\uff1a\u94fe\u8def\u5c42\u5230\u4f20\u8f93\u5c42 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\/* MD \/ \u5bcc\u6587\u672c\u4e2d\u7684 .toc\uff08\u542b\u535a\u5ba2\u56ed\u642c\u5bb6\u7b49\u5d4c\u5957\u7ed3\u6784\uff09\uff1b.toc-box \u5728\u4fa7\u680f\uff0c\u4e0d\u53d7\u5f71\u54cd *\/#content_views .toc,\/* \u7f16\u8f91\u5668\u5e38\u5728\u76ee\u5f55\u524d\u540e\u63d2\u5165\u7a7a p\uff08:empty \u4ecd\u5360 20px\uff09\uff0c\u4e00\u5e76\u53bb\u6389\u907f\u514d\u9876\u7a7a\u9699 *\/#content_views.markdown_views > p:empty:has(+ .toc),#content_views.markdown_views > .toc + p:empty,\/* \u5bcc\u6587\u672c\u65e7\u7248\u76ee\u5f55\u6807\u8bb0 *\/#content","og_url":"https:\/\/www.wsisp.com\/helps\/123238.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-11-06T13:49:08+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/11\/20261106134848-6aeddac0b60cd.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"13 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/123238.html","url":"https:\/\/www.wsisp.com\/helps\/123238.html","name":"\u7f51\u7edc\u534f\u8bae\u5b89\u5168\u7b14\u8bb0\uff08\u4e0a\uff09\uff1a\u94fe\u8def\u5c42\u5230\u4f20\u8f93\u5c42 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-11-06T13:49:08+00:00","dateModified":"2026-11-06T13:49:08+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/123238.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/123238.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/123238.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u7f51\u7edc\u534f\u8bae\u5b89\u5168\u7b14\u8bb0\uff08\u4e0a\uff09\uff1a\u94fe\u8def\u5c42\u5230\u4f20\u8f93\u5c42"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/123238","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=123238"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/123238\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/123225"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=123238"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=123238"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=123238"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=123238"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}