分析对比了常用的网络入侵的手段以及入侵检测方式,结合ARP地址欺骗原理和SNMP协议,实现了基于snort的入侵检测系统,完成了对IP地址盗用、交换机端口流量以及CPU利用率等的检测,能够比较准确地检测出各种入侵行为,达到了预期的效果。 Analysis and comparison of commonly used means of network intrusion and intrusion detection methods, combined with ARP address spoofing principle and SNMP protocol to achieve a snort-based intrusion detection system to complete the IP address theft, switch port traffic and CPU utilization detection, Can accurately detect a variety of intrusion, to achieve the desired results.