Based On The Host Network Protocol Analysis Systems Design And Implementation

With the development of the information industry, local area network technology has been widely used. the main reason which has a high demand for LAN can be attributed to a fundamental principle of computer networking, that is the so-called computer access localized. As new technology's generation and application,there is a growing concerntration about the service quality and network's security of high-speed Ethernet, which is a new challenge to the researchers.One of the most fundamental and direct way to meet and overcome this challenge is to hold the data stream's situation in the transmission network.By using the network protocol analysis system to capture and decode the most original communicating packages of network, we can know the characteristic of behaviors in the network, and we also can know what is happening and what is about to happening in the network correctly, in time and real-timely.Contents of this paper consist of four parts as following:1, capture data package (taking the TCP/IP protocol stack as model, and analyzing hierarchically).2, construct data package, and provide the sending function.3, recognize sessions of transfer layer, and analyzing based on these sessions.4, implement the distributing chart of the protocol flux.This paper analyzed and summarized the current network traffic capture method,from the point of capture theory,these methods can be divided into two categories, one category is based on the hardware features of network traffic capture, the other is host-based network traffic capture, and completely summarized the two network traffic capture methods in five occasion from the capture of specific methods, which generate additional traffic, whether it is distributed, the costs and constraints, application, at the same time we clarified a number of hosts participating in how the network traffic generated when a large number of additional traffic capture reasons, and proposed methods for additional network traffic, gives the corresponding algorithms. proposed methods for soluting the problem of time inconsistency. I designed and implemented the whele structure of the system,the host agency of traffic capture,the server of traffic capture, and the tools for network traffic analyzing Finally, we proved the validity and practicability by an example of network traffic analyzing.