以太网网络监听技术研究  

Network Monitoring and Detecting for Ethernet

作　　者：杨鸾[1] 董少军[1] 

机构地区：[1]中国人民解放军63880部队司令部

出　　处：《兵工自动化》2004年第6期37-38,共2页Ordnance Industry Automation

摘　　要：信息发送主机向以太网目的机发送含目的机 IP 的数据帧,将得到目的机回复的 mac。再向网络接口发出I/O 控制命令并置其为监听模式,可捕获或监听网络中传播的信息。监听检测,可发送正确 IP 和错误物理地址引诱监听机响应,或使用反监听工具。监听防范,可采用逻辑或物理网络分段、交换式集线器、加密、划分 VLAN 和身份验证等措施。The host computer sends data frames including the IP address of objective computer to objective computer of the Ethernet, and receives MAC address from the objective computer. The host sends the I/O commands to network interface and set it as Monitoring mode, thus it can capture or monitor the information transmitted in the Ethernet. Monitoring inspection is that sends correct IP address and error hardware address to tempt monitoring computer to respond, or counter-monitoring is used. Monitoring defense measures of logical or physical network subsection, switching Hub, Encryption, Vlan and identification are adopted.

关 键 词：网络监听 防范检测 以太网 数据帧 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP393.11[自动化与计算机技术—计算机科学与技术]