The Design And Implementation Of Network Protocol Analyzer For Northeast Coalfield Geological Survey Bureau’s LAN

With the rapid development of network technology abroad, the deep study of networksecurity is quite forefront. There is much network analysis and interception software in theforeign and in recent years the development of related network software in our country was ingood order and well arranged. For example: Sniffer, EtherPeek NX, Omin3abroad, thedomestic such as: JL CSS network analyzer and Kelai network analysis system are relativelyoutstanding in country. However, the corresponding large equipment and related auxiliarytools must be purchased to make the software available. In addition, the software is quiteexpensive and the maintenance cost is very high. As an example, the above mentionednetwork protocol analyzer developed by JL CSS in network analysis and network simulationis quite remarkable, but the major disadvantage of this software is that the correspondinghardware support is needed, that is to say, the routers and switches developed by JL CSS arenecessary to make it useful. So, it merges as the times require developing a simple andpractical network protocol analyzer. This project is more prominent in the interface while thepresent domestic software is commonly unsatisfactory in the field.This paper presents the development of the project background, the main applicationfunctions, as well as the development environment and development tools. We focus toachieve the following functions based on requirements analysis.First, the scanning function, comparing the ARP scanning, semi port scanning andNetBIOS scanning, then use the method of NetBIOS service interface scanning and MFCSocket Library to achieve the purpose of fast and stable scanning LAN.Second, interception function, provided by the WinPcap class library and protocoldriver, realizes the interception of data frame from the physical layer..Third, the sending function, provided by the WinPcap class library and protocol driver,six kinds of data frames to send (MAC, ARP, IP, ICMP, TCP, UDP).Last, interface, the controls provided by development library of BCGControlBarLibrary of BCG and the common controls provided by MFC are used, provides a splitwindow, consisting of three views of CListView, CTreeView and CEditView.