Reduction Technology Research, Based On A Common Platform, Tcp / Ip Protocol

Protocol reassembling is very important in the increasingly sophisticated network technologies. Through the network protocol reassembling technology, we can quickly know the status of the network traffic and the security state of the network. At the same time, the protocol reassembling technologies could also provide service to other systems and tools, such as protocol reduction techniques for Intrusion Detection System. It can provide the upper interface and original data packets to the Intrusion Detection System. Network administrator can also use it to monitor the network congestion situation and protect the network.Protocol reassembling system can capture all network packets. According to the standard protocol, it provides the way for the packets restructuring and reduction. The traditional protocol reassembling technology has a lot of the inadequacies. Some tools and network development kits provide the IP fragments reorganization, TCP flow restructuring, and the application layer protocol reassembling. The packets capture and reorganization in the traditional system base on common platform are inefficient.In this paper, in order to solve the problem of the traditional data capture and protocol analysis, we research the IP fragments and TCP flow restructuring and application layer protocol reorganization, such as the data structure which is used in the TCP/IP protocol reassembling system.Firstly, this paper researches the deficiency of the protocol reassembling system, especially in the IP protocol reassembling and TCP flow reorganization. We introduce the process of packets restructuring base on the universal platform.Secondly, this paper introduces the standard IP protocol and TCP protocol description of the various fields and analyses the theoretical basis of IP and TCP protocol reorganization. Then we research the design of data structures and algorithms in the IP protocol and TCP protocol reorganization. At IP layer, we analyze how to determine the IP segments belong to the same originality IP packet. At TCP layer, we analyze the way the TCP flow reorganize base on the TCP SEQ number. We use the well restructuring TCP stream data to achieve context feature matching reorganization in application layer. Using different IP fragments and TCP sessions in parallel chain dynamic task allocation strategy, the protocol reassembling system takes full advantage of the various nodes to restore the ability which effectively realize the problem of parallelism.Finally, this paper make a compare between TCP/IP protocol reassembling systems on the universal platform and the common protocol reassembling system using the traditional model of the protocol stack. We also make a comprehensive testing and performance evaluation. Through the theoretical analysis and experimental results, we know the superiority and feasibility of the TCP/IP protocol reassembling system on the universal platform.