核心层网络封包截获技术应用毕业设计.doc

核心层网络封包截获技术应用 学生姓名 XXX 院系名称 计算机科学学院 专业名称 XXXXX 班 级 200X级 X班 学 号 XXXXXXXXX 指导教师 XXX 完成时间 20XX年 5 月 XX 日 核心层网络封包截获技术应用 学生：XXX 指导教师：XXX 内容摘要：随着网络安全问题的日益突出，用户对网络安全技术及其产品也越来越关注。在众多的网络安全技术中，核心层封包截获技术有着非(LSP)的相关概念、原理和用途；核心层NDIS网络驱动程序；核心层网络封包截获技术。通过对原理说明，使读者了解实现这项技术的具体方Because the network security problems have gone from bad to worse, computer users begin to notice network security technology and network security products. Among all kinds of security technologies, the technology of packet interception in kernel layer is very important for it is the basis for packet filter firewall and it is widely used in packet filtering, protocol conversion, interception of message analysis and network sniffering. Therefor, I devote myself to studying on the technology of the packet interception in kernel layer.In this article, firstly, the present situation of this technolony is described to tell reader why I study on it. Secondly, principles of packet interception are told about in detail.In this detailed description part, the concept of the LSP ,the theory of the LSP and the usage of LSP are introduced in more detail. What’s more, I also explain many aspects of the network drivers in kenel layer and tell reader how to implement the interception.Thus, reader can understand the technology of packet interception in kernel layer accurately. Finally, to implement and check out the technology I have discussed, I compile the software named NetFilter which is analyzed and designed systematically in this article. By testing , the software can intercept packets in kenel layer and analyze packet in application layer. Key words: network security kernel layer packet interception目录 1概述 1 1.1研究目的和意义 1 1.2研究背景 2 1.2.1国内现状 2 1.2.2国外现状 2 1.3主要贡献 3 1.4文章的结构 4 2预备知识及原理说明 4 2.1分层服务提供者(LSP) 4 2.1.1分层服务提供者(LSP)的概念 4 2.1.2分层服务提供者(LSP)的原理 4 2.1.3分层服务提供者(LSP)的用途——用户级封包截获 5 2.2核心层网络驱动和NDIS网络驱动程序 5 2.2.1核心层(Kernel Mode)概述 5 2.2.2核心层网络驱动 6 2.2.3 NDIS网络驱动程序 6 2.3核心层网络封包截获技术 7 2.3.1Windows