The Research Of Network Packet Capturing On Windows Platform

Network packet capturing is one of the key technologies in building some network security systems as firewall, sniffer and NIDS etc. Because of the complicacy of operation systems and network technologies itself, few published articles discussed this issue, especially on the Windows platform which is not an open-source OS. For a long time, only several large foreign companies have the ability to build advanced network security systems on windows platform. A lot of essential technologies are under their control. As a sensitive technology, network packet capturing is very important in improving our network security products and enhancing our national defense.This paper expatiates on the mechanisms and realization of the network packet capturing on Windows platform, and also introduces the method and the procedure of how to build up a network security system. Here, network packet capturing has been designed and realized in NSMS (Network Security Monitoring System). NSMS is a local area network security system based on agent and sniffer. In this system agents and sniffers can cooperate with each other to make up for their deficiencies. Both them together ensure the security of the Local Area Network effectively.