An Implement of Broadband Network Monitoring System Based on Libnids and Winpcap
Xuren Wang, Famei He · 2009
Broadband networks have been well developed and increasedly applied in Chinese industries' and organizationspsila networks. The security problems in broadband networks are discussed widely and frequently. There exit various network security protection tools, such as firewall, IDS (intrusion detection system), leak scanning and so on. All these tools deal with packet heads, not with detailed packet content. But some attacks, for example, guessing password, can only be examined in packet content. This paper presents a broadband network monitoring system (BBNMS) based on Libnids, which is an implementation of an e-component of network intrusion detection system. In the system not only packet heads but packet contents can be analyzed. The paper has explored three main topics: packet content analysis, packet real-time analyzing with optimized programming technologies and enhancing Libnidspsila function to detect PPPoE protocol packets of broadband network. Empirical results illustrate that the intrusion detection model can detect intrusion more accurately.