Design And Implementation Of Ethernet Monitoring Based On WinPcap

With the popularity of Internet technology in China, network plays a more and more important role in daily work. The Intranet of enterprises and institutions become an indispensable part in daily work. The safety problems of the Intranet will affect the enterprises. So we must pay sufficient attention to it. In this case, the paper design and implementation an ethernet monitoring system based on WinPcap, which is a more popular network development kit under Windows OS.First, this paper introduces the significance of ethernet monitoring as well as the development of research home and abroad. Second, it describes working elements of network card and the principle of ethernet monitoring. Third, it illustrates the working mechanism and the inner architecture of WinPcap. Finally, design and implementation an ethernet monitoring system based on WinPcap. The whole system frame is divided into four parts:network packet capture module, network protocol analysis module and storage module. The author designs and realizes the technology of getting the network data, the protocol analysis and the database storage. Getting the network data using WinPcap under Windows OS are discussed in network packet capture module. In protocol analysis the IP, TCP, UDP and ICMP analysis are discussed in detail. In storage module the network data is stored in SQL Server 2000 database. It can be analyzed afterwards. Finally, a simple hardware running environment is built. Passing test, the software has achieved the prospective function.