資源描述:
《基于tcpip的協(xié)議分析器設(shè)計(jì)畢業(yè)論文》由會員上傳分享,免費(fèi)在線閱讀,更多相關(guān)內(nèi)容在學(xué)術(shù)論文-天天文庫。
1、基于TCP/IP的協(xié)議分析器設(shè)計(jì)基于TCP/IP的協(xié)議分析器設(shè)計(jì)【摘要】網(wǎng)絡(luò)分析技術(shù)作為一種積極的安全監(jiān)測技術(shù),能實(shí)時(shí)監(jiān)測網(wǎng)絡(luò)中發(fā)生的一些事件,也更加有效地保障被監(jiān)測網(wǎng)絡(luò)的安全性?;赥CP/IP的分析技術(shù)也是具有入侵監(jiān)測能力網(wǎng)絡(luò)系統(tǒng)的核心技術(shù)之一。所以,研究以捕獲數(shù)據(jù)包為基礎(chǔ)的網(wǎng)絡(luò)分析方法在當(dāng)今是非常必要的。本課題針對10Mbps以太網(wǎng),設(shè)計(jì)一個具有實(shí)時(shí)性的網(wǎng)絡(luò)數(shù)據(jù)包捕獲和統(tǒng)計(jì)分析系統(tǒng)。本系統(tǒng)使用具有數(shù)據(jù)包捕獲功能的winpcap開源包,對流經(jīng)本機(jī)的網(wǎng)絡(luò)數(shù)據(jù)包進(jìn)行嗅探和統(tǒng)計(jì)分析。在循環(huán)捕獲網(wǎng)絡(luò)上的數(shù)據(jù)包的同時(shí),對
2、數(shù)據(jù)包進(jìn)行分析與歸類。本系統(tǒng)以TCP/IP體系結(jié)構(gòu)為根本,對數(shù)據(jù)包實(shí)現(xiàn)由下至上的層層解析,最終實(shí)現(xiàn)對HTTP協(xié)議報(bào)文的讀取,F(xiàn)TP文件傳輸協(xié)議的命令讀取,也可以實(shí)現(xiàn)以UDP協(xié)議或TCP協(xié)議為基礎(chǔ)的QQ數(shù)據(jù)包的判斷。本論文首先介紹了捕獲網(wǎng)絡(luò)數(shù)據(jù)包的工具,其次是重點(diǎn)介紹了winpcap開源庫的相關(guān)知識、捕獲數(shù)據(jù)包的理論過程以及數(shù)據(jù)包的分析過程等?!娟P(guān)鍵詞】winpcap開源包,TCP/IP協(xié)議,數(shù)據(jù)包捕獲,協(xié)議分析I基于TCP/IP的協(xié)議分析器設(shè)計(jì)DesignaprotocolanalyzerbasedonTCP/IP
3、protocolAbstractNetworkanalysistechnologyasapositivesafetymonitoringtechnology,itcanoccurinthereal-timemonitoringofnetworkeventsandmoreeffectiveprotectionofthesecurityofthenetworktobemonitored.Thenetworkanalysistechnologyisalsooneofthecoretechnologiesfornetwor
4、kintrusiondetectionsystems.Therefore,thestudytocapturethepacket-basednetworkmonitoringisnecessaryintodays.Thetopicdesignsareal-timenetworkpacketcaptureandstatisticalanalysissystemfor10MbpsEthernet.Thesystemuseswinpcapcomeswithnetworkpacketcapturemechanismformo
5、nitoringandstatisticalanalysisofdatapacketsflowingthroughthelocalcomputer.Intheloopcapturingdatapacketsatthesametime,synchronizationisachievedontheanalysisofdatapacketsclassified.ItismainlydonetotheTCP/IPprotocolstack-basednetworkpacketcapture.Thesystemisbased
6、ontheTCP/IParchitectureandanalysispacketsfromthebottomlayers.Ultimately,thesystemcanreadtheHTTPprotocolpackets,theFTPfiletransferprotocolcommandanditcanalsoimplementthejudgmentsoftheQQdatapacketsbasedonUDPorTCPprotocol.Thispaperintroducesanetworkpacketcapturet
7、oolfirstly.Andthepaperfocusesonthewinpcapknowledge,theprincipleofpacketcaptureandanalysisofdatapacketsmechanismsecondly.Keyword:winpcapopen-sourcepacket,TCP/IPprotocol,packetcapture,protocolanalysisII基于TCP/IP的協(xié)議分析器設(shè)計(jì)目錄第一章緒論11.1.課題背景11.2.研究現(xiàn)狀11.3.本文研究內(nèi)容21.4.論文結(jié)
8、構(gòu)2第二章網(wǎng)絡(luò)數(shù)據(jù)捕獲及winpcap的相關(guān)知識32.1網(wǎng)絡(luò)數(shù)據(jù)捕獲32.11網(wǎng)卡的工作模式32.12共享式的網(wǎng)絡(luò)數(shù)據(jù)捕獲32.13交換式的的網(wǎng)絡(luò)數(shù)據(jù)捕獲42.2網(wǎng)絡(luò)開發(fā)工具42.21網(wǎng)絡(luò)開發(fā)現(xiàn)有的函數(shù)庫42.22數(shù)據(jù)包的捕獲工具52.3winpcap的相關(guān)知識52.31winpcap簡介52.32winpcap的各功能模塊52.33winpcap的主要函數(shù)