核心层网络封包截获技术应用毕业设计论文.doc

毕业设计论文 核心层网络封包截获技术应用 核心层网络封包截获技术应用 内容摘要：随着网络安全问题的日益突出，用户对网络安全技术及其产品也越来越关注。在众多的网络安全技术中，核心层封包截获技术有着非(LSP)的相关概念、原理和用途；核心层NDIS网络驱动程序；核心层网络封包截获技术。通过对原理说明，使读者了解实现这项技术的具体方Because the network security problems have gone from bad to worse, computer users begin to notice network security technology and network security products. Among all kinds of security technologies, the technology of packet interception in kernel layer is very important for it is the basis for packet filter firewall and it is widely used in packet filtering, protocol conversion, interception of message analysis and network sniffering. Therefor, I devote myself to studying on the technology of the packet interception in kernel layer.In this article, firstly, the present situation of this technolony is described to tell reader why I study on it. Secondly, principles of packet interception are told about in detail.In this detailed description part, the concept of the LSP ,the theory of the LSP and the usage of LSP are introduced in more detail. What’s more, I also explain many aspects of the network drivers in kenel layer and tell reader how to implement the interception.Thus, reader can understand the technology of packet interception in kernel layer accurately. Finally, to implement and check out the technology I have discussed, I compile the software named NetFilter which is analyzed and designed systematically in this article. By testing , the software can intercept packets in kenel layer and analyze packet in application layer. Key words: network security kernel layer packet interception目录 1概述 1 1.1研究目的和意义 1 1.2研究背景 2 1.2.1国内现状 2 1.2.2国外现状 2 1.3主要贡献 3 1.4文章的结构 4 2预备知识及原理说明 4 2.1分层服务提供者(LSP) 4 2.1.1分层服务提供者(LSP)的概念 4 2.1.2分层服务提供者(LSP)的原理 4 2.1.3分层服务提供者(LSP)的用途——用户级封包截获 5 2.2核心层网络驱动和NDIS网络驱动程序 5 2.2.1核心层(Kernel Mode)概述 5 2.2.2核心层网络驱动 6 2.2.3 NDIS网络驱动程序 6 2.3核心层网络封包截获技术 7 2.3.1Windows网络系统体系结构 8 2.3.2用户模式下的网络数据过滤 9 2.3.3内核模式下的网络数据过滤 10 2.3.4应用层封包截获与核心层封包截获 11 3 NetFilter系统分析 11 3.1需求分析 11 3.2功能说明 1