摘要： 传统的基于IPv4的入侵检测系统(IDS)和网管系统(NMS)必须升级以支持IPv6。在IDS和NMS的升级过程中，需要获得各种不同特征的IPv6数据包，尤其是在IP层互异的数据包来测试和验证其功能性。该文在实验的基础上，设计并实现了IPv6数据包生成器IPSender6作为提供IPv6测试数据的工具，用于网管系统和IDS系统的研究测试。实测证明了IPSender6在提供测试数据方面的灵活性和有效性。

关键词: IPv6协议, 扩展首部, 入侵检测

Abstract: Traditional IPv4-based Intrusion Detection System(IDS) and Network Management System(NMS) need to be upgraded to support IPv6, which needs various IPv6 data, especially the packets with distinct extension headers on IP layer to certify their functionalities. This paper designs and implements an IPv6 packet constructor——IPSender6 based on experiments. Experiments prove that IPSender6 provides test data for IDS and NMS flexibly and effectively.

Key words: IPv6, extension header, intrusion detection

中图分类号: 

• TP309.2