网络数据包截获及分析工具的设计

Data Packet Interception and Analysis Tools Design

本文主要讨论了在以太网（Ethernet）环境下的TCP／IP（其中IP协议的版本是IPv4）数据包的截获与分析技术。通过使用该技术，可以让一台主机能够接收流经该主机的所有数据包，而不理会数据包包头中目的地址的内容。这种技术在网络安全及网络管理领域有着举足轻重的地位。本系统利用套接字（Socket）对网卡的编程来实现对数据包的截获及分析。

This paper mainly discusses the TCP/IP （which IP protocol version is IPv4） packets interception and analysis techniques under the Ethemet （Ethernet） environment. Through using the technology, we will allow a host to be able to receive all flowing through the mainframe data packets, irrespective of the purpose of data packets Baotou address content. This technology in the network security and network management areas have a pivotal position. The system uses socket （Socket） on the card to achieve the programming of the data packets intercepted and analyzed.