北京理工大学毕业设计--网络数据获取与分析软件设计.docVIP

北京理工大学毕业设计（论文）  PAGE 42 摘 要 随着信息化发展，网络安全问题日渐突出，网络攻击日益泛滥，所以网络信息安全就变的非常重要。网络主机必须有足够的安全措施，否则网络的价值就会贬值。从网络防护技术看，实施网络安全防护的基本技术措施是获取和过滤网络协议数据包，对数据包内容进行分析，从而发现非法或者恶意的行为，这种网络数据获取与分析技术也是目前基于内容检查的网络安全设备所采用的主要技术。 针对网络协议分析的迫切需求，设计开发可扩展的、界面友好的网络数据获取与分析软件，对信息网络的安全防护具有重要的现实意义。本设计就是为了给网络使用者提供一个有用的网络数据包分析工具，其有三个主要功能：数据包的捕获、数据包信息分析和数据包信息的显示。本设计通过对所在机器的网卡设置为混杂模式，探索局域网络里所有经过的数据包，并实现了数据包捕获、信息分析、信息显示，为使用者了解当前的网络数据包状况提供了很好的参考。 关键词：数据包捕获 数据包分析 TCP/IP协议 嗅探器 原始套接字 ABSTRACT With the development of information industry，the problem of network security becomes more and more serious．The increasing proliferation of network attacks．So the network information security becomes very important．Web hosting must have adequate security measure，otherwise the value of network will depreciate．In terms of network defense technology, the basic technical measures of implementing network security defense is capturing and filtering network protocol data packets，and then analyze the data packets contents，so as to discover illegal or malicious behavior，also，network packet capture and analysis technique is major technique being adopted by network safety based on content inspection so for． According to the urgent demand of network packet capture and analysis，the design and development of protocol software with extensible function and friendly interface has important practical significance on security defense of specialized information network．This system is developed in order to provide a useful Internet users of network packet analysis tool．This system has three main functions：packet capture，packet analysis and display information packets in—formation．System based on the Internet where machine Settings for mixed mode，explore the local area network packets，and after all，realized the packet capture，information analysis，information shows that for users understand cur—rent network packets provide a good reference． Key words：Packet Capture；Packet Analysis；TCP / IP protocol；Sniffer；Raw Socket 目 录 TOC \o 1-3