毕业设计（论文）_网络嗅探器的设计与实现.docVIP

网络嗅探器的设计与实现 摘 要 随着网络技术的发展和网络应用的普及越来越多的信息资源放在了互联网上网络的安全性和可靠性显得越发重要通过使用嗅探器传输的数据包分析分析结果可供网络安全分析之用分析文首先分析了嗅探的原理和危害,并介绍了几种常见的嗅探器Design and Realization of Network Sniffer Abstract Along with the development of network technologies and the popularization of network applications, more and more information resources are put on internet. The network security and reliability become important increasingly. Therefore, the demand of the software tools which could analyze, diagnosis and test network performance or security are more and more pressing. Network sniffer has two sides. An attacker can use it to monitor network data, to achieve the purpose for obtaining information illegally, while network managers can use it to capture and analyze the data which transmitted on network. The result of analysis can be used to analyze the network security. This thesis briefly analyzed the technology of network sniffer, and researched the capture mechanism of network data packets such as winpcap and raw socket. This paper first analyzed the theory and the harm of sniffer, introduced several common sniffers, and then researched the capture technology which used in the intrusion detection system. The thesis uses raw sockets on windows platform to realize one sniffer which can complete unpack and analyze data packet. Key words: network sniffer; capture data packet; analyze data capture; raw sockets 目 录 论文总页数：25页 1 引言 1 1.1 网络安全的现状 1 1.1.1 计算机网络安全的问题 1 1.1.2 网络安全机制及技术措施 1 1.2本课题的研究意义 2 1.3本文研究的内容 3 2 网络嗅探器的基本原理 3 2.1网络嗅探器概述 3 2.2 嗅探器实现基础 3 2.3 常见的sniffer 4 2.4 数据包捕获机制的研究 4 2.4.1 WinPcap包捕获机制 5 2.4.2 套接字包捕获机制 6 2.5 嗅探器的两面性 8 2.5.1 sinffer的危害 8 2.5.2 通过网络嗅探进行网络管理 9 3 入侵检测系统与嗅探器 9 3.1 入侵检测概念 9 3.2 入侵检测的实现与嗅探器 10 3.2.1 入侵检测的实现与嗅探器的关系 11 3.2.2 数据包嗅探技术在入侵检测系统中的应用 11 4 嗅探器的实现与测试 12 4.1利用套接字开发网络嗅探程序的步骤 12 4.2 嗅探器的具体实现原理 13 4.3 数据包捕获程序设计 15 4.4 数据包的解析 15 4.5 数据的显示 19 4.6 嗅探器的测试 22 结 论 23 参考文献 23 致 谢 24 声 明 25 1 引言 1.1 网络安全的现状 1.1.1 计算机网络安全的问题 随着各种新的网络技术的不断出现、应用和发展，计算机网络的应用越来越广泛，其作用也越来越重要。