Research And Implementation Of Internet Interception And Protocol Analysis

Network Interception and protocol analysis are useful technologies for network management, such as network traffic monitoring, network event logging, network intrusion detection, etc. We study the wiretap of Ethernet and packet capture programming on UNIX platform. We develop an Internet traffic accounting system based on packet capture technology. The Internet traffic accounting system has been proved to be accurate, reliable and stable, support up to lOOM fast ethernet, cheap and flexible, network router independent. So that it can be deployed in various campus networks. The system has been serving the Jinan University campus network for more than one year. It is a great help of network management. We analyse and introduce the algorithms of IP datagram reassembly and TCP stream reassembly and the implementation of LIBNIDS. We study protocol analysis of Simple Mail Transfer Protocol, message decoding then further discuss Internet mail transfer intrusion detection and protection by listening SMTP streams. These technologies can be deployed in email interception, email transfer logging, email service intrusion detection and protection.