TCP/IP拦截与分析  

TCP/IP intercepts and analyses

作　　者：王咏梅 

机构地区：[1]湖南电视台,湖南长沙410003

出　　处：《长沙通信职业技术学院学报》2004年第1期56-61,共6页Journal of Changsha Telecommunications and Technology Vocational College

摘　　要：NDIS是一种网络协议规范,它支持三种类型的网络驱动程序:网卡驱动程序、中间驱动程序、协议驱动程序。DDK是MICROSOFT发布的开发WINDOWS核心层驱动程序的工具。文章主要讨论在WIN2K环境下利用NTDDK开发中间驱动程序,并且利用该驱动程序拦截IP包。以及在WIN2K环境下,用户程序是如何与核心层驱动程序进行通话的。NDIS is a kind of network protocol standard which supports the network drivers of three kinds:NIC drivers, intermediate drivers and protocol drivers. DDK is the development WINDOWS core tool of a layer of drivers that MICROSOFT is issued. This paper discusses how to use NTDDK to develop intermediate drivers under environment of WIN2K and Intercepts IP packet with this driver. We also discuss how to communicate between user mode and kernel mode under environment of WIN2K.

关 键 词：TCP/IP NDIS 中间驱动程序 拦截 

分 类 号：TN915.04[电子电信—通信与信息系统]