Research And Realize Of Capture And Analyzation Of Network Data Based On WinPcap

The application of networks popularize rapidly along with the development of computer technology, networks become a necessary tool in people's daily life. At same time, people pay more attention to the security and dependability of networks. Security means that the information in network is not been wrecked, revealed and changed. Dependability means that the network clould run continuously and stably. The technology of capturing, monitoring and analyzing of network data is the basic of network's maintenance and the main means of network inbreak as well. So it is significative to research the technology of capturing, monitoring and analyzing of network data.This paper is focus on the technology of capturing and analyzing of network data.Firstly, illuminate the actuality, theoretics and technology of security of network data and the real system today briefly, and emphasize the elements and advantage of Berkeley package filter (BPF) that aimed to capture and filter the data in network. Explain the developer library of network security . After the presentation of Libpcap that based on BPF, this article make a comparison between the NPF capture and filter engine and the BPF, and, enumerate the variedly application of WinPcap in Windows system and show each advantage of these. Subsequently, expatiate the principle and construction of WinPcap and the inside function of it as well. Summarize the layout and the configuration of the programs that aimed for the capturing and analyzing of network data. Bring out the method of design and realization of capturing and analyzing of network data and realize the function by means of WinPcap programming. Finally, this paper forecast the technology of network data monitoring and analyzing in the future (e.g.in WLAN and switching net).Nowadays, the research of technology of capturing and analyzing of network data that based on WinPcap is keep goning for it's open source, it is benefit to not only the evolution of this library but also to the affording of lastest solution for the network security problem.