NDIS技术在网络管理中的应用研究

Application and Research of Network Management by NDIS

介绍了在Windows XP的核心驱动层上采用NDIS中间层驱动技术对数据包进行拦截和分析的技术,在此基础上对DDK中附带的Pass Thru中间层驱动框架进行扩展,实现了对以太网Ipv4网络封包的过滤,同时设计并实现了网络监控系统。运行结果表明,采用NDIS中间层网络封包过滤技术在对网络进行有效管理的同时保证了网络的安全性。

This paper introduces the technology of intercepting and analyzing data packets, adopting the NDIS intermediate driver technology in the Core drive level of Windows XP. On the basis, the PassThru intermediate driven framework incidental to Windows DDK expands to filter Ipv4 network packet, furthermore, having designed and realized the network monitoring system. Operating results show that using the technology of NDIS intermediate layer network packet filtering ensures the security of network, as well as the effective management of the network.