基于NDIS中间层驱动的对等网络流量监管机制

摘要

由于对等网络P2P对网络带宽的贪婪性,对P2P数据流的监管是当前研究的热点问题.本文在分析比较几种相关技术的基础上,提出了一个基于网络驱动接口规范(NetworkDriver Interface Specification,NDIS)中间层驱动的对等网络监管系统架构,对各功能实体特性进行了详细描述.以设备驱动程序开发包(Device Driver Kit,DDK)提供的Passthru例程为骨架对该系统进行了实现,对共享内存通信机制、数据拦截机制和主要数据结构进行了讨论.最后,通过测试数据拦截完备性和效率,以及对P2P软件的识别和阻断能力,验证了本系统的有效性和可用性.%With the development of the P2P technology,the P2P application occupies lots of net-work bandwidth resources.Identification and control of P2P traffic is a hot topic nowadays.Based on the analysis of four related technologies,a NDIS intermediate driver based supervision system is proposed,and the entity characteristics are introduced in detail.The system is realized by using DDK Passthru routine,and the shared memory communication mechanism,packet in-terception mechanism and main data structure are also discussed.Finally,the experimental results of three common used P2P applications show the validity and usability of the system.