基于Python的网络协议分析工具的研究与应用

Research and Application of an Analysis Tools of Network Protocol Based on Python

随着人们对网络安全重视程度的加深,网络协议朝着复杂化、多样化发展,而传统的协议解析工具存在着扩展性差、功能固定等局限。为了更好地符合实际需要,本文提出一种基于Python的支持自定义协议扩展和密态包解析的网络协议分析工具,主要对网络数据包解析技术进行了研究,采用脚本扩展的方式实现了对数据包的捕获、过滤并进行解析,同时加入了自定义密态包解析功能。实验结果表明,数据包密文部分的解析还原达到了预期效果。

With the deepening of people＇s attention to network security, network protocol is becoming more complicated and diversified, while the traditional protocol parsing tools has the disadvantages as poor extension, functional fixed limits. In order to better meet the actual needs, we propose an analysis tool of network protocol, which support extending the user-defined protocol and analyzing the encrypted packet based on Python, mainly studies the analytical technology of network packets, adopting the way of script extensions to realize the packet capture, filtering and parsing, adding the custom state package analytic function. Experimental results show that the analysis of the encrypted data packet can achieve the expected design purpose.