Research On And Implementation Of Network Packet Collection And Analysis For IP Network Testor

With the rapid expansion of Internet scale, the ceaseless occurrence of new network applications and the increasing complication of network topology, good service quality and adequate security guarantee are more and more required. The network measurement and management tools play important role in ensuring the efficiency and reliable operation of network. The paper mainly focuses on two key technologies about software implementation of IP network testor: network packet collection and analysis based on lightweight MiniGUI graphical programming and efficient SQLite database, and application research---ARP attack detection system of IP network testor in network security.Firstly, we introduce the concept, performance metrics, measurement methods and key techniques of IP network testor.Besides, Lightweight MiniGUI graphical interface and efficient SQLite database are discussed. Then, the embedded development process and environment of the IP network testor are given in detail. Secondly, under the function of the testor and the requirement of the database, based on database SQLite, the scheme to build upper software module---"network packet collection and analysis module" is proposed, designed in detail and implemented by programming. The test results show that the testor work effectively and have a good stability with efficient and order functions such as network data acquisition, real-time storage, data query and statistical analysis and etc. Finally, the application of IP network testor in network security is researched. In view of the threat of network security, based on the software module"network packet collection and analysis", an effective ARP attack detection system is put forward, which can effectively detect and locate the ARP attack to maintain safety of network information.