一个网络监控系统NMBPD的设计与实现  

Design and Implementation of Network Monitoring System NMBPD

作　　者：罗斌[1] 李彤[1,2] 杨维忠[2] 

机构地区：[1]云南大学信息学院,云南昆明650091 [2]云南大学软件学院,云南昆明650091

出　　处：《小型微型计算机系统》2009年第6期1124-1128,共5页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(60463002)资助;云南省应用基础研究基金项目(2007F008M)资助

摘　　要：为了提高网络管理人员对广播网络的监控能力,提出一个基于NDIS协议驱动程序的网络监控(Network Monitoring Based on NDIS Protocol Driver,简称为NMBPD)系统模型.通过实现一个基于NDIS协议驱动程序的数据包捕获驱动程序,能高效地捕获原始数据包,此外,设计并实现一个轻量级的协议栈以及能处理4种最流行的应用层协议的解析器,并通过实验对NMBPD系统进行了测试.NMBPD系统可以监控广播网络上的所有主机的活动,降低了网络管理难度.In order to improve the network managers＇ ability ot momtormg broadcasting network, a network monitoring system based on NDIS protocol driver （NMBPD） is proposed in this paper. A capturing packets driver is implemented with NDIS protocol driver. It can capture the raw packets with a high efficiency. In addition, A light protocol stack and an application protocol parser which can parse four popular application protocols are designed and implemented. NMBPD system is tested via experiment. NMBPD system can monitor the behavior of all hosts on a broadcasting network and reduce the difficulties managing network.

关 键 词：网络监控 NDIS IP分片 TCP数据段 组装 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]