Lan Packet Monitoring The Netmonitor The Design And Realization

With the widespread use of local area networks, internal security problems of local area networks are becoming increasingly serious. Traditional firewall technology's focus is on how to prevent the intrusion and attack of external network to internal network, while less consideration to control the internal LAN users using network resources. So it is not enough for businesses that only relying on traditional firewall in the management of internal staff to prevent the illegal operation of internal network resources to protect the internal LAN security. Therefore, how to intercept and filter from the inside to the outside of the network data packets must be considered.With LAN requirements, this paper do an in-depth research on realizing the functions of packet capture, packet filtering, and data packet analysis in the local area network. On this basis, we design and implement a local area network packet monitoring software system NetMonitor. The main work includes:1.Deeply studying the network monitoring software WinPcap on the Windows environment and analyzing the general way of development network monitoring software based on WinPcap2. Analyzing the working principle of the ARP protocol and the existing defense methods against ARP spoofing attack, understanding the features of their defense and detection, studying the implementation principle of these methods, their complexity, ideal environment and the advantages and disadvantages, and to propose some effective solutions to ARP spoofing.3.Analyzing the protocols commonly used in detail, giving the protocol head and detail analysis algorithm;4.Establishing the library of strategies for implementation。...