資源簡介
一本書上的實例,主要針對網絡的協議進行分析,然后判斷其中的入侵事件

代碼片段和文件信息
//--------------------------------------------------------------------//
//????????????????作者:劉文濤????????????????????????????????????????//
//????????????????書籍:《網絡安全編程技術與實例》????????????????????//
//--------------------------------------------------------------------//
#include?“stdafx.h“
#include?“ProtocolanalysisDlg.h“
#include?
#include?“sniffer.h“
#include?“arpprotocol.h“
struct?arpheader?DisplayARP;
extern?HWND?hWnd;
void?ARPOperation(const?unsigned?char*?packetdata)
{
unsigned?short?Protocol;
unsigned?short?Hardware;
unsigned?short?Operation;
struct?ARP?*Arp;
sprintf(DisplayARP.HardwareLength?“%s“?““);
sprintf(DisplayARP.Hardware?“%s“?““);
sprintf(DisplayARP.OperationCode?“%s“?““);
sprintf(DisplayARP.ProtocolLength?“%s“?““);
sprintf(DisplayARP.Protocol?“%s“?““);
sprintf(DisplayARP.OperationInformatin?“%s“?““);
Arp?=?(struct?ARP?*)?packetdata;
Hardware?=?ntohs(Arp->Hardware);
Protocol?=?ntohs(Arp->Protocol);
Operation?=?ntohs(Arp->OperationCode);
sprintf(DisplayARP.HardwareLength?“%d“?ntohs(Arp->HardwareLength));
sprintf(DisplayARP.ProtocolLength?“%d“?ntohs(Arp->ProtocolLength));
sprintf(DisplayARP.Hardware?“%d“?Hardware);
sprintf(DisplayARP.Protocol?“%d“?Protocol);
sprintf(DisplayARP.OperationCode?“%d“?Operation);
switch?(Operation)
{
case?1:
sprintf(DisplayARP.OperationInformatin?“%s“?“ARP請求“);
::PostMessage(hWnd?WM_MY_MESSAGE_ARP?0?0);
break;
case?2:
sprintf(DisplayARP.OperationInformatin?“%s“?“ARP應答“);
::PostMessage(hWnd?WM_MY_MESSAGE_ARP?0?0);
break;
case?3:
printf(“(RARP?request)\n“);
sprintf(DisplayARP.OperationInformatin?“%s“?“RARP請求“);
::PostMessage(hWnd?WM_MY_MESSAGE_ARP?0?0);
break;
case?4:
sprintf(DisplayARP.OperationInformatin?“%s“?“RARP應答“);
::PostMessage(hWnd?WM_MY_MESSAGE_ARP?0?0);
break;
default:
sprintf(DisplayARP.OperationInformatin?“%s“?“未知“);
::PostMessage(hWnd?WM_MY_MESSAGE_ARP?0?0);
return?;
}
}
?屬性????????????大小?????日期????時間???名稱
-----------?---------??----------?-----??----
?????文件???????2063??2008-03-07?14:26??intrusion?detection\arpprotocol.cpp
?????文件????????721??2008-03-07?14:26??intrusion?detection\arpprotocol.h
?????文件????1393816??2010-01-17?17:52??intrusion?detection\Debug\DeviceDialog.sbr
?????文件????1387793??2010-01-17?17:53??intrusion?detection\Debug\filterdlg.sbr
?????文件????1428250??2010-01-17?17:53??intrusion?detection\Debug\intrusiondetect.sbr
?????文件?????250792??2010-01-17?17:52??intrusion?detection\Debug\intrusiondetectionsystem.res
?????文件????1388399??2010-01-17?17:54??intrusion?detection\Debug\mydialog.sbr
?????文件????1388611??2010-01-17?17:54??intrusion?detection\Debug\ParameterDlg.sbr
?????文件??????77824??2010-01-17?17:54??intrusion?detection\Debug\vc60.pdb
?????文件???????2302??2008-03-07?14:26??intrusion?detection\DeviceDialog.cpp
?????文件???????1566??2008-03-07?14:26??intrusion?detection\DeviceDialog.h
?????文件???????2619??2008-03-07?14:26??intrusion?detection\ethernetprotocol.cpp
?????文件????????573??2008-03-07?14:26??intrusion?detection\ethernetprotocol.h
?????文件???????1699??2008-03-07?14:26??intrusion?detection\filterdlg.cpp
?????文件???????1543??2008-03-07?14:26??intrusion?detection\filterdlg.h
?????文件???????1640??2008-03-07?14:26??intrusion?detection\icmpprotocol.cpp
?????文件????????554??2008-03-07?14:26??intrusion?detection\icmpprotocol.h
?????文件???????7455??2008-03-07?14:26??intrusion?detection\intrusiondetect.cpp
?????文件????????479??2008-03-07?14:26??intrusion?detection\intrusiondetect.h
?????文件?????268164??2010-01-17?17:50??intrusion?detection\intrusiondetectionsystem.aps
?????文件???????4211??2010-01-17?17:54??intrusion?detection\intrusiondetectionsystem.clw
?????文件???????6286??2008-03-07?14:51??intrusion?detection\intrusiondetectionsystem.dsp
?????文件????????590??2008-03-07?14:52??intrusion?detection\intrusiondetectionsystem.dsw
?????文件?????238592??2010-01-17?17:54??intrusion?detection\intrusiondetectionsystem.ncb
?????文件??????62976??2010-01-17?17:54??intrusion?detection\intrusiondetectionsystem.opt
?????文件???????9144??2010-01-17?17:54??intrusion?detection\intrusiondetectionsystem.plg
?????文件??????10497??2008-03-07?14:52??intrusion?detection\intrusiondetectionsystem.rc
?????文件???????1733??2008-03-07?14:26??intrusion?detection\IntrusionRuleDialog.h
?????文件???????2841??2008-03-07?14:26??intrusion?detection\ipprotocol.cpp
?????文件????????905??2008-03-07?14:26??intrusion?detection\ipprotocol.h
............此處省略27個文件信息
評論
共有 條評論