摘要: 主要介绍了如何在Win32环境中利用Winpcap开发包开发网络入侵检测系统中的网络实时监听程序,并给出了具体的设计与实现方法。对怎样提高监听程序的效率也提出了一些见解。这种网络实时监听程序的设计与实现方法不仅在网络入侵检测系统中,而且在其他网络监控管理系统中都有广泛应用。
关键词:
监听程序,
Winpcap,
混杂模式,
网络入侵检测
Abstract: This paper discusses how to develop the sniffer of the system of network intrusion detection in the Win32 environment using Winpcap development kit and presents the specific method of design and implementation.And some opinions on how to increase the efficiency of sniffer is given. This method of design and implementation of sniffer is not only used in the system of network intrusion detection but also is widely used in other systems of network monitor.
中图分类号:
袁春阳,柴乔林,柳忠光. 网络入侵检测系统中网络实时监听程序的设计与实现[J]. , 2002, 28(10): 158-160.
YUAN Chunyang, CHAI Qiaolin, LIU Zhongguang. Design and Implementation of Real Time Network Sniffer in Network Intrusion Detection System[J]. , 2002, 28(10): 158-160.