基于Linux下的无线网络数据包捕获

摘要

Based on the research and analysis of network packet capture,a method of packet capture based on Linux system is proposed.This method uses the Gee router based on OpenWrt system and crosses compilation.WinSCP is implanted into the router environment,and a packet capture system is developed on the wireless router to realize four main functions of capture,de-encapsulation,storage and reassembly recovery.After the reassembly recovery,the system detects the sensitive data information flowing through the router,and if the suspected illegal access is found,the routing table will be modified and controlled.The development of the system has positive significance for the detection and protection of personal and small and medium-sized enterprise network security.%在对网络数据包捕获与分析研究的基础上,提出了基于Linux系统的数据包捕获方法.使用基于OpenWrt系统的极路由器并进行交叉编译,通过WinSCP植入到路由器的环境开发出在无线路由器上的数据包捕获的系统,并实现捕获、解析、存储与重组还原四大主要功能.重组还原后,系统对流过路由器的敏感数据信息的检测会更容易,若发现可疑的非法访问,则对路由表进行修改控制.系统的开发对个人及中小型企业网络安全检测与防护有积极的意义.