基于NDIS中间层的嗅探器的设计与实现

Design and Implementation of Sniffer Based on NDIS Intermediate Driver

NDIS驱动程序是Windows平台下开发网络驱动程序必须遵守的设计框架。文章对NDIS中间层进行了详细的分析,介绍了嗅探器的基本工作原理,提出了一种嗅探器的设计思想,并给出其实现的关键技术和设计框架。在此基础上实现了在Windows平台下基于NDIS中间层驱动程序的嗅探器,该嗅探器在实际应用中发挥了重要的作用。

NDIS intermediate driver is the standard of the Windows network driver. This paper gives a detail to the architecture and design of NDIS intermediate driver. It introduces the ultimate principles of sniffer, presents a design thought of network sniffer and introduces the key technologies. Meanwhile, we implement a sniffer based on NDIS intermediate driver in Windows. The sniffer plays an important role in practice.