网络数据包的拦技术.docVIP

武汉工程大学邮电与信息工程学院 毕业设计（论文）2012年5月没有任何剽窃、抄袭、造假等违反学术道德、学术规范的行为，也没有侵犯任何其他人或组织的科研成果及专利如摘要 关键词：Abstract As the development of information industry, communication system requirements processing capability at the same time, the connection capacity in the system and keep improving. But in the information connection ability, ability to increase circulation data at the same time, because of the vulnerability of the network data such as the problem of network security becomes more and more serious, the network interface information security is especially important. For the network packet filtering and testing also now have a lot of method, there are a lot of open source software for our reference, but some of these details or some of the existence of the problem, in effect and efficiency have some problems, analysis is not very convenient. So try to choose on the subject. This topic is the use of Visual C++ 6.0 multithread technique research and development platform. The son is responsible for the choice of interface open thread and the mixed mode, set to inspect packets and keep them in a document. The design and implementation of the system can monitor local area network flows through all the host packets, and analyzes each packets agreement, the source/purpose MAC address, source and destination IP address, packet length and bags of data. Can both management and maintenance of the health of the network operation, can also detect the network intrusion, can even learn knowledge network protocol. Keywords: Network interface information; Packet filtering; Packet inspection 目录 1 章 绪论 1 1.1 TCP/IP拦截技术的发展状况 1 1.2 防火墙技术 1 1.3 网络数据包结构与安全 2 第 2 章 网络通信的基础知识 5 2.1 TCP/IP协议 5 2.2 TCP/IP网络分层模型 5 2.3 IP数据包封装格式 5 2.3.1 IP协议 6 2.3.2 ICMP协议 7 2.3.3 UDP协议 8 2.3.4 TCP协议 8 第 3 章 NDIS检测系统 9 3.1入侵检测系统 9 3.2 NDIS的具体实现 10 3.2.1 NDIS网络设备接口规范 11 3.2.2 NDIS在网络中的作用 11 3.2.3 NDIS的工作原理 12 3.2.4 NDIS的网络编程 12 3.2.5 发送数据 13 3.2.6 接收数据 14 第 4 章 数据包过滤系统 15 4.1 网络数据包的分析 15 4.2 包过