Research A Distributed Network Monitoring System Based On Software Agent Technology

Internet is becoming an indispensable part of people's daily life. As its rapid development, various network hidden troubles and attack issues via Internet occur more frequently, which brings about more and more serious damages. At the same time, with the rapid process of informationization among our administrations, institutions and enterprises, the local network is inevitably to be connected with Internet. So it is vital important to improve the defense ability of local network and its withstand capability against harmful information. Based on this background, it is of practical significance to investigate one kind of distributed network monitoring system.This paper based on the research of structure, function and characteristic of domestic- and abroad network monitoring system, a design method for one kind of distributed network monitoring system based on the agent software technology has been proposed, which is aiming at the existing problems concerning centralized network monitoring system. The system contains the following three subsystems: control module, configuration module and agent module. In the thesis, we discuss the function and module design of this system and focuses on introducing the operational principle and design of agent module.By introducing the technical model of agent software and utilizing its congenital distributed character, the designed agent module is made to be a software which has its own reactivity and autonomy.After analyzing and studying the category and specialty of data packet interception technology under Windows surrounding, the date packet interception technology based on the SPI packet filtration has been adopted to develop the network monitoring subsystem DLL independently, which can be inserted into the system essence of the monitored machines. The data packet interception has been realized and the function of monitoring network has been fulfilled; meanwhile, the reliability of controlling the monitored machines has also been improved.Aimed at the great volume of agent module and the communicating problems of control module, the Windows I/O completion port technology has been deeply researched and applied successfully into the system, so that the problems of communicating speed between two subsystems and their implementing stability can...