摘要： 讨论了组成网络安全监测系统的各个模块及实现它的技术细节，尤其是在系统的总体结构设计、抓包模块中对网上数据包的捕捉和包还原模块中的HTTP还原模块，提供了较详细的说明。该系统能够提供关于网络数据流的完整数据内容的可视化，而且它是被动的侦听，不易被发现。

关键词: 网络安全, 网络协议, 监测, TCP/IP联接, TCP/IP

Abstract: At present,to implement network security policy,there is one effective mothod with the network security monitor system to monitor the whole network security.This system is used as a tap at the exit route of the network.It captures the information transferred on the network,and recovers the whole application layer content including WWW,E-mail,FTP and Telnet.This system also includes a database supporting complex database query.This system does not need an IP address and does not have any effect on the performance of the network.

中图分类号: 

• TP393.08