基于SharpPcap的多线程局域网监听技术研究

Research of Multi-Threading LAN Monitoring Based on SharpPcap

通过分析ARP协议存在的漏洞及局域网基本工作原理,提出了基于SharpPcap平台的多线程网络监听技术。该技术通过向被监听主机发送ARP REQUEST包来实现任意两台局域网主机间的通信监听,同时利用线程池技术,避免了频繁创建、销毁线程的开销,实现了非阻塞通信,有效改善了算法性能。实验结果显示,监听分析过程稳定,数据包捕获率高。

By analyzing the ARP protocol leak and LAN basic working principle of the platform based on multi-threaded SharpPcap network monitoring technology. The technology to be monitored by the host sends ARP REQUEST packets to the LAN hosts to achieve any communication between the two hosts, while using thread pool, to avoid the frequent creation, destruction of the overhead of thread to achieve a non-blocking communications, effectively improved the performance of the algorithm. The results showed that monitoring of the process is stable and high data packet capture rate.