本文介绍了网络行为的特点,对失范网络行为的原因进行分析,通过在被管理的PC机网卡驱动程序上安装数据采集模块,PC机利用数据采集模块采集经过自己的数据包,然后把采集到的数据包发送给监测系统,监测系统对数据包进行解析、重组、行为还原,再把还原的行为发给监测中心。当监测中心监测出失范的数据行为时,就给控制中心发送消息,控制中心对失范的数据行为进行控制,最后达到对失范行为控制的目的。 This paper introduces the characteristics of network behavior, analysis of the reasons for the behavior of the anomie network, by installing the data acquisition module on the managed PC network card driver, the PC uses the data acquisition module to collect the data that passes through itself and then collect Of the data packets sent to the monitoring system, monitoring system for data packet analysis, reorganization, behavior reduction, and then restore the behavior of the monitoring center. When the monitoring center to monitor the behavior of the anomie data, it will send a message to the control center, the control center to control the behavior of the data anomie, and finally achieve the purpose of control of anomie behavior.