论文部分内容阅读
通过分析ARP协议存在的漏洞及局域网基本工作原理,提出了基于SharpPcap平台的多线程网络监听技术。该技术通过向被监听主机发送ARP REQUEST包来实现任意两台局域网主机间的通信监听,同时利用线程池技术,避免了频繁创建、销毁线程的开销,实现了非阻塞通信,有效改善了算法性能。实验结果显示,监听分析过程稳定,数据包捕获率高。
By analyzing the loopholes existing in ARP protocol and the basic working principle of LAN, a multithreaded network monitoring technology based on SharpPcap platform is proposed. This technology realizes the communication monitoring between any two LAN hosts by sending the ARP REQUEST packet to the monitored host. At the same time, it uses the thread pool technology to avoid the frequent overhead of creating and destroying threads, realizing non-blocking communication and effectively improving the performance of the algorithm . The experimental results show that the monitoring analysis process is stable, and the data packet capture rate is high.