局域网基于文件共享方式的传输文件的截取

Capturing File Transferred in File-sharing Mode in LAN

不同的网络操作系统(NOS)在局域网内采用的底层通信协议是不一样的,但实现文件共享的高层协议基本都采用SMB协议。文章说明如何通过对局域网内所截取的用于文件传输的SMB数据包进行分析及重组,从而得到最初的传输文件。其操作环境为Windows 2000Professional,但实现的基本原理是适用于其它NOS建立的局域网。

The bottom-protocols taken in LAN for communication are diverse in different NOS. While the top-protocol taken in NOS for file-sharing is mostly 8MB protocol. This article mainly aims at analyzing and regrouping the 8MB packets captured in LAN for file-transmission, so as to get original file before transmission. The implementation in this article is based on the Windows 2000 Professional. The rationale is fit in with other NOSs.