A Study On Winsock-substitute And Its Application Of Using To Monitor The Network

Windows Socket is a set of open and multi-protocol supported interfaces of Windows network programming. Now, most network applications under Windows operation system use Windows Socket. We can use Winsock-substitute to capture the data transferred by network application programs and then analyze these data to assure the validity of them.This thesis discusses the realization and application of using Winsock-substitute to monitor the net comprehensively and systemically. Firstly, it introduces familiar ways of monitor network at present. Secondly, it analyses and discusses correlative knowledge of using Winsock-substitute to monitor the network, such as DLL , Winsock and process. Thirdly, it designs a detailed way of using Winsock-substitute to monitor the net. It mainly discusses two different ways to realize it: the substitution ofwsock32.dll file and holding up of API functions. Finally it realizes an application of using Winsock-substitute to monitor the net, i.e. using it to monitor HTTP protocol.