Design And Implementation Of Data Packet Analyzing Software For The Specialized Network Protocol

With the expansion of network construction scale in our army, computer network and information system are suffered more and more threat, network security become more and more prominent. In terms of network defense technology, the basic technical measures of implementing network security defense is capturing and filtering network protocol data packets, and then analyze the data packets contents, so as to discover illegal or malicious behavior, also, the protocol analysis technique is major technique being adopted by network safety based on content inspection so for. But considered form safety point, military information and other specialized networks often adopt specialized protocol to do data transfer, but there has not been tools aimed at specialized network data packets analysis at present, and it is not convenient to analyze these complex protocol, it also takes great influence on research and test of some specialized network security equipment. Therefore, according to the urgent demand of specialized network protocol analysis, the design and development of protocol software with extensible function and friendly interface has important practical significance on security defense of specialized information network.First in the paper, the related techniques of network monitoring principle and data packets capture and filtration and etc is discussed, then according to the concrete needs of specialized protocol analysis, the software system structure is designed. The system is divided into six basic modules, that is, management and configuration module, data filtering module, data capturing module, extensible protocol analysis module, extensible tree structure display memory module, statistical module. And the demand of protocol extension is fully taken into account, which building reasonable and effective programming implementation framework. The specialized protocol analysis software is programmed, and its function and capability is tested and analyzed.The test results shows the velocity of specialized network protocol data packets analysis software is rapid, the new protocol can be added fast and effective. The test also shows that the protocol analysis results is correct, and the protocol analysis display has clear hierarchy, it is also easy to understand, which provide powerful support to a specialized security equipment of dealing with specialized protocol testing work.