1. Start-> Run-> Enter cmd and enter arp-a in the character window.
Note: 172.16.37.254 is the gateway address, and the following 00-00-0c-07-0a-01 is the physical address of the gateway. This physical address is not changed by default. If it is found that the physical address is not the address, it indicates that it has been attacked by the arp virus.
2. solution:
(1) execute arp-a to list all arp information cached by the local machine;
(2) Run arp-d to clear the cache information.
Instance:
(1) Run arp-a to list:
172.16.37.25 00-0F-EA-11-00-5E
172.16.37.254 00-0F-EA-11-00-5E
Since we already know that the correct physical address of the gateway is 00-00-0c-07-0a-01, it is changed to 00-0F-EA-11-00-5E, indicating that 172.16.37.25 is using arp to cheat and impersonate the gateway.
(2) Run arp-d 172.16.37.25 and press Enter. Then run arp-d 172.16.37.254 and press enter to clear the arp cache. Alternatively, run arp-d and press enter to clear all arp cache information.
This is a temporary measure.