VC++WinPcap网络流量监控与分析系统的设计和实现
该系统对Windows下基于WinPcap的网络监控技术进行了研究，分析了TCP/IP协议在Windows中的实现，采用面向对象的方法进行需求分析和功能设计。在VisualC++环境下，综合使用了WinPcap技术、注册表编程和API函数等VC编程技术，实现了从数据链路层捕获原始数据包、流量监控和统计等主要功能，这为网络监控的实现提供了有效的技术支持。21367
毕业论文关键词 网络安全；WinPcap；数据包捕获；流量统计
The Design and Implementation of Monitoring and Analyzing Tool for Network Traffic
Abstract
Monitoring and analysis of network traffic is an important basis for the maintenance of network security. Now many of the technology and the implementation of the software are based on the packet capture. The current network environment is very complicated, network traffic monitoring system is an effective approach for the analysis of the network environment. From the angle of analyzing packet traffic, it can obtain the state of the network by analyzing the real-time packet capture.
This system focuses on the network monitoring technology ,that under the system of Windows based on WinPcap,and analyzes the implementation of the TCP/IP protocol.It uses object-oriented method to make a needs analysis and function design.Under the environment of Visual C++, it adopts VC program technologies of WinPcap, Windows register and API to capture the raw packets from the data link layer and implement the monitoring and statistics of the traffic,which provides technical support for network security management.
Keywords network security; WinPcap;capture packets; traffic statistics
目 录
1 引言 1
1．1 课题背景 1
1．2 网络安全现状 1
1．3 研究的目的和意义 2
1．4 课题的任务和功能 2
1．5 论文结构安排 3
2 相关知识与技术 4
2．1 OSI参考模型与TCP/IP模型 4
2.1.1 OSI模型 4
2.1.2 TCP/IP参考模型 5
2.1.3 OSI模型与TCP/IP模型的比较 5
2．2 数据包结构 6
2.2.1 MAC帧结构 6
2.2.2 IP数据包结构 6
2.2.3 TCP和UDP数据包结构 7
2．3 网卡工作原理 8
2．4 WINPCAP 8
2.4.1 WinPcap概述 8
2.4.2 WinPcap数据结构和函数功能 9
3 流量统计模块 11
3．1 开发环境 11
3．2 程序设计思路与方法 11
3.2.1 PDH简介 11
3.2.2 注册表查询 11
3.2.3 流程框架 12
3.2.4 主程序结构框架 13
3．3 核心代码分析 14
4 流量分析模块 19
4．1 系统设计模块设计 19
4.1.1 网卡选择模块 19
4.1.2 数据包捕获模块 20
4.1.3 过滤模块 24