Automatic Restoration From A TCP/IP Packet Research Of Image Files

With the continuous development of Internet information technology, its application has been involved in all aspects of society. Current computer system interconnect is commonly used TCP/IP protocol, due to historical and become the industry standard, basically did not consider the data content security. Many criminals through the use of computer information security technology to the public security organs of the criminal investigation and evidence collection obstacles, and then escape punishment. In order to implement and improve the handling efficiency of police training, research from the TCP/IP data packets to automatically restore the image file is very meaningful.Select this famous open source network protocol analyzer wireshark as a research and design data packet image restore design platform. To this end, this paper focuses in the Linux environment, complete software tool to compile wireshark to achieve, and the use of their image reduction technology for secondary development, the main contents include:1. Packet recovery techniques for image generation, development, current status and trends of the summary description.2. Wireshark software described in detail framework, and gives the secondary development of the project process.3. Study of image format files compression and decompression of RLE algorithm, LZW algorithm.LZ77algorithm, in order to achieve decompression of image data.4. Realized in wireshark in a custom image format for subsequent image data packet provided to restore the image format support.5. Detailed description of the format of the image to determine the process and determine the image format in the case of the process of restoring the image.6. Comprehensive analysis of the current data packet image restoration technology deficiencies, and the improved method.The subject of post-secondary development wireshark to identify and restore jpeg, gif, bmp, png image format, data packet, but for reasons such as slow speed of the network caused by the incomplete image data packets, but can not be restored.