A Simple Study And Realization Of Passive Sniffing Detection

As the development of the network sniffing,many Security problems arise increasingly,and there are more and more studies about sniffing,detection and anti-sniffing.Sniffing detection technology can detect the sniffing action immediately, prevent further development of sniffing and reduce the loss.Of cause,sniffing detection faces challenges as the followings:how to improve the accuracy,how to adapt the requirements of different network surroundings,and so on.This thesis firstly describes the related background knowledge and theories of network sniffing,analyzes kinds of sniffing detection technologies and pays more attention to the study of ARP protocol and the passive Sniffing detection based on ARP protocol.Secondly,according to the features of network security programming, the author designs a passive sniffing detection program in the VC development by making use of the interface offered by WINPCAP in windows plat.During the process of the design,the author has a full understanding on the packet capture under windows,and previously makes program in data link layer.On the detection program; the author harmonizes the receiving and sending of ARP packets through the method of multithread programming.In the end of this thesis,the author points out the limitation of the study and elaborates an expecting of a further improved study and design.