http网络数据包截获与还原.doc

PAGE PAGE i 摘要：在因特网日益发展壮大的今天，万维网在其上的通信量已经超过90%，万维网信息的安全问题已经越来越被人们所重视，而作为万维网应用层核心协议的http协议是基础。当网络发生异常时，对网络上传输的数据进行监视和分析，是网管人员解决网络故障的一种常用方法。 本文介绍应用层HTTP数据包的截获与还原技术的实现,并简要介绍其中所涉及的数据包截获、数据包分析、应用数据重组以及数据包解码等关键技术。该系统可以监听网管人员感兴趣的数据包，通过对其进行分析和研究，分析出其遵守的协议以及其应用层数据，恢复到被监视用户所看到数据的格式。该系统的实现，为网管人员有效地管理网络提供了一种直观的工具。 关键词：http数据包； 截获； 还原 Abstract: With the increasing development and expansion of Internet, the traffic of World-Wide-Web has occupied more than 90 percent on Internet at present. Therefore, people have attached more and more importance to the security of the WWW information. While HTTP (Hypertext Transfer Protocol) as the central protocol of WWW’s application layer forms the foundation of it. Monitoring and analysing the data transferred on network is the daily works for network manager The writer of this paper introduced the design and implementation for capturing a part of http data packets, recovering the captured http data packets，and analyzed some key technologies about capturing data packet brief，packet analyzing, reconstructing application data and packet decoding and so on．This system can monitor the packages which network manager is interested in，analyze the protocols which the packet uses，recover the format which the end user see．The implementation of the system provides a visual tool for network managers. Key Words: http packets；capture；recover 目 录 TOC \o 1-3 \u 前言 PAGEREF _Toc137874290 \h 1 第一章 http网络数据包截获与还原的理论基础 PAGEREF _Toc137874291 \h 2 1.1 网络体系结构 PAGEREF _Toc137874292 \h 2 1.1.1 网络参考模型概述 PAGEREF _Toc137874293 \h 2 1.1.2 TCP/IP协议族 PAGEREF _Toc137874294 \h 3 1.2 http协议概述 PAGEREF _Toc137874295 \h 4 1.2.1 http协议的几个重要概念 PAGEREF _Toc137874296 \h 5 1.2.2 http协议结构 PAGEREF _Toc137874297 \h 6 1.2.3 http协议的运作方式 PAGEREF _Toc137874298 \h 12 1.3 基于http协议的网络行为监视 PAGEREF _Toc137874299 \h 16 1.3.1 http协议的安全因素 PAGEREF _Toc137874300 \h 16 1.3.2 基于http协议监视的实现 PAGEREF _Toc137874301 \h 17 第二章 开发工具与环境配置 PAGEREF _Toc137874302 \h 19 2.1 JAVA语言介绍 PAGERE