The embodiment of the invention provides a message processing method and device applied to network equipment, and the method comprises the steps: receiving a first message; after the first message successfully passes the basic detection, determining the number of second messages received within a preset duration, wherein the message information of the second messages is the same as the first message information of the first message; judging whether the number is greater than a preset number threshold; if so, clearing the first table item in the fast forwarding table; wherein the first table item comprises second message information of the first message; and performing attack detection on the first message. By applying the embodiment of the invention, the security risk existing in the network equipment is effectively reduced.