一种网络应用协议流的重组与回放机制的研究与实现

Research and Implementation of Mechanism of Re-assembling and Re-playing Streams of Network Application Protocols

根据网络审计的思想,提出了一种对网络应用协议流的重组与回放机制的设计与实现方案,可以无遗漏地还原网络现场,从而为网络取证提供了一种有利手段,具有一定的实际意义。

According to the idea of network audit,the paper describes the design and implementation of re-assembling and re-playing network application protocols,which can present us with an exhaustive description about scene of running network applications,and can give us a powerful means of collecting evidences of behaviors in the network.And it is of some practical importance.