数据包截获与分析技术浅析

On Interception and Analysis of TCP/IP Data Package

在共享型以太网中,多个主机共享一个通信信道,并且几乎所有主机都是依靠TCP／IP协议族完成主机间的通信。通过TCP／IP数据包截获与分析技术,可以让一台主机接收流经该主机的所有数据包, 而不理会数据包包头中目的地址的内容。鉴于Windows2000操作系统在网络环境下的广泛应用,因此介绍在Windows2000系统下实现该技术的总体设计思想以及主要代码设计。

Many hosts share only one channel and communicate with each other under the TCP/IP protocol on Ethernet. By using this technology, a host can receive all the packets that pass through it without considering the address in the head. Considering Windows 2000 operating system extensively used in the network, we introduce the general design method and the key code design.