基于共享网络的数据采集——数据包嗅探器的设计原理

The Principle of a Sniffer Based on Shared Network

嗅探器是入侵检测系统中信息收集部分的一个很重要的组件.它是一种利用计算机的网络接口截获送往目的地为其他计算机的数据报文的技术,它通过套接字从网络上读取数据包并解析数据包报文头中各字段的意义,从而分析数据帧以及所使用的协议的类型.

The Sniffer is an important component in the intrusion detection system. It is a technology that the network interface is used to intercept other computer＇s message. According to the Socket, it acquires the packets from network and analyses every field＇s meaning of the packet header, then analyses the data frame and the protocol types that the packet use.