Differentiate And Research Of Host Computer's Pattern Characteristic Of Network Action's

For monitoring network's action and achieve standardization of network's action, this paper analyzes working principle of Snort, analyzes protocol of instant messenger, protocol and technology about action of common user's browsing internet page, monitoring and differentiating are implemented. The major job as follow:1, Snort which is open source and is NIDS is researched, include code and working principle, know the technology about sniffer and NIDS, its useful for user's network.2, Instant messenger's protocol is analyzed with protocol analyzing tool, mostly, MSN protocol is researched, include its working principle, all kinds of function's implement, and method of inspect. Respond of monitor and warning are researched, and technology about recovery of content of chatting. 3, Mostly, recovery of protocol of browse internet page and involved technology is researched include:(1)How to recover the url of user visited, involved how to filtrate the real url which is clicked by user; how to sort url with nerve net technology, and monitoring of using of bbs and search engine;(2)Parsed and recovered of content of internet pages, implemented by dealing with HTML text,save resource and change HTML.Based on Snort's core engine, add some plugins and other functions to it, this paper implement a system, results of the experiment are satisfactory.