NDIS-HOOK网络封包截获技术实现  

The Implementation of Network Packets Capturing Technology based on NDIS-HOOK

作　　者：刘静[1] 裘国永[1] 

机构地区：[1]陕西师范大学计算机科学学院,西安710062

出　　处：《微处理机》2008年第5期51-53,56,共4页Microprocessors

摘　　要：首先介绍了NDIS(网络驱动接口规范)的基本概念,引出NDIS的层次结构,简要介绍各个层次的功能。然后在此基础上介绍NDIS-HOOK技术的特点、工作原理和两种实现方法,并对各种网络封包截获技术进行比较。经过测试,NDIS-HOOK技术可以截获所有网络封包。最后,对本次研究和开发工作进行总结,并对基于NDIS-HOOK的网络封包截获技术的应用作了探讨和展望。This paper introduces basic conceptions of NDIS （Network Driver Interface Specification） and its system hierarchy and function. Then, based on this foundation, this paper introduces technology characteristic,operational principle and two implementation methods of NDIS - HOOK. Also, this paper compares several network packets capturing technology. It can capture all network packets and functions well. In the end,solutions are presented and perceptions as well as future work of NDIS - HOOK based network packet capturing are discussed.

关 键 词：网络驱动接口规范 NDIS—HOOK技术 网络封包 截获 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]