摘要： Snort是目前最受关注的一个代码开放网络入侵检测系统(NIDS)。报文嗅探是其最基本也是最重要的部分。该文分析了Snort报文嗅探器的工作方式和工作过程,对Snort报文嗅探和报文解析的实现进行了分析。
关键词:
Snort,
网络入侵检测系统,
网络监听,
报文嗅探器
Abstract: At present, snort is an open source network intrusion detection system (NIDS) attracting most attentions. Packet sniffing is its most basic and most important part in the system. This paper presents the working model and operation procedure of the sniffer in snort system, analyzes implement methods of packet sniffer and packet analyzer.
中图分类号:
杨忠宝,杨宏宇. Snort报文嗅探和报文解析实现的剖析[J]. , 2005, 31(13): 113-.
YANG Zhongbao1, YANG Hongyu2, 3. Anatomy of Snort Sniffing and Packet Analysis[J]. , 2005, 31(13): 113-.