Blind Analysis Of The Link Layer Protocol Based On The Network Layer

In recent years，reconnaissance of the radio channel tended to focus on theidentification of the signal modulation mode and the data coding manners, however,more and more wireless communication system requires strong networking capabilityand a wireless data link layer protocol is an indispensable part, and so has the data linklayer protocol parsing received more and more attention in the field of wireless channelreconnaissance. However, there are a wide variety of link layer protocols with differentkinds of frame structure, and existing a fact that reconnaissance receiver can`t separatebinary stream data as frames. Therefore, how to effectively parsing unknown data linklayer protocol has become a difficult problem.This thesis focuses on the data link layer protocol analysis problem in the field ofradio monitoring，focusing on separating binary stream data as frames, identifyingfeature field of data link layer protocol frame, frame reconstruction and ultimately parsethe unknown data link layer protocol, by the way provide a interface for higher layerprotocol parsing. This paper contains the following three parts:1) Study the significance of data link layer protocol parsing in the field of radiomonitoring, analysis of several existing data link layer protocol analysis schemes, andbased on the analysis of several typical data link layer protocol,I establish a wirelessdata link frame macroscopic frame structure model.2) Put forward an IP packet recognition method. On the base of this method, thisthesis put forward an overall program of unknown data link layer parsing; the programconsists of three parts: separating binary stream data as frames, data link frame featurefield recognition and data frame reconstruction.3) Based on the over overall program of unknown data link layer parsing scheme,this thesis designed a frame analysis program which is embedded into the protocolparsing software wireshark, to achieve the high-level protocol parsing.Through the analysis of the results of the simulation data processing, this thesisverify the correctness of separating binary stream data as frames and data link framefeature field recognition presented in this paper, and by constructing the frame, wireshark complete the high-level protocol parsing.