hakin9 - libpcap.pdf - hakin9 - jimasek

3URJUDPPLQJ ZLWK /LESFDS

± 6QLI¿QJ WKH 1HWZRUN

)URP 2XU 2ZQ $SSOLFDWLRQ

$WWDFN

/XLV 0DUWLQ *DUFLD

'LI¿FXOW\

6LQFH WKH ¿UVW PHVVDJH ZDV VHQW RYHU WKH $53$1(7 LQ

FRPSXWHU QHWZRUNV KDYH FKDQJHG D JUHDW GHDO %DFN WKHQ

QHWZRUNV ZHUH VPDOO DQG SUREOHPV ZHUH VROYHG XVLQJ VLPSOH

GLDJQRVWLF WRROV $V WKHVH QHWZRUNV JRW PRUH FRPSOH[ WKH QHHG

IRU PDQDJHPHQW DQG WURXEOHVKRRWLQJ LQFUHDVHG

1 RZDGD\V FRPSXWHU QHWZRUNV DUH XVX

V\VWHPV SRUW NQRFNLQJ GDHPRQV SDVVZRUG

VQLIIHUV $53 SRLVRQHUV WUDFHURXWHUV HWF

)LUVW RI DOO OHW V UHYLHZ KRZ SDFNHW FDSWXUH

ZRUNV LQ (WKHUQHW EDVHG QHWZRUNV (YHU\ WLPH

D QHWZRUN FDUG UHFHLYHV DQ (WKHUQHW IUDPH

LW FKHFNV WKDW LWV GHVWLQDWLRQ 0$& DGGUHVV

PDWFKHV LWV RZQ ,I LW GRHV LW JHQHUDWHV DQ LQWHU

UXSW UHTXHVW 7KH URXWLQH LQ FKDUJH RI KDQGOLQJ

WKH LQWHUUXSW LV WKH V\VWHP V QHWZRUN FDUG GULYHU

7KH GULYHU WLPHVWDPSV UHFHLYHG GDWD DQG FRS

DOO\ ODUJH DQG GLYHUVH V\VWHPV WKDW

FRPPXQLFDWH XVLQJ D ZLGH YDULHW\ RI

SURWRFROV 7KLV FRPSOH[LW\ FUHDWHG WKH QHHG

IRU PRUH VRSKLVWLFDWHG WRROV WR PRQLWRU DQG

WURXEOHVKRRW QHWZRUN WUDI¿F 7RGD\ RQH RI WKH

FULWLFDO WRROV LQ DQ\ QHWZRUN DGPLQLVWUDWRU WRRO

ER[ LV WKH VQLIIHU

6QLIIHUV DOVR NQRZQ DV SDFNHW DQDO\]HUV

DUH SURJUDPV WKDW KDYH WKH DELOLW\ WR LQWHUFHSW

WKH WUDI¿F WKDW SDVVHV RYHU D QHWZRUN 7KH\ DUH

YHU\ SRSXODU EHWZHHQ QHWZRUN DGPLQLVWUDWRUV

DQG WKH EODFN KDW FRPPXQLW\ EHFDXVH WKH\ FDQ

EH XVHG IRU ERWK ± JRRG DQG HYLO ,Q WKLV DUWLFOH

ZH ZLOO JR WKURXJK PDLQ SULQFLSOHV RI SDFNHW

FDSWXUH DQG LQWURGXFH OLESFDS DQ RSHQ VRXUFH

DQG SRUWDEOH SDFNHW FDSWXUH OLEUDU\ ZKLFK LV WKH

FRUH RI WRROV OLNH WFSGXPS GVQLII NLVPHW VQRUW

RU HWWHUFDS

:KDW \RX ZLOO OHDUQ

‡ 7KH SULQFLSOHV RI SDFNHW FDSWXUH

‡ +RZ WR FDSWXUH SDFNHWV XVLQJ OLESFDS

‡ $VSHFWV WR FRQVLGHU ZKHQ ZULWLQJ D SDFNHW FDS

WXUH DSSOLFDWLRQ

:KDW \RX VKRXOG NQRZ

3DFNHW &DSWXUH

3DFNHW FDSWXUH LV WKH DFWLRQ RI FROOHFWLQJ GDWD

DV LW WUDYHOV RYHU D QHWZRUN 6QLIIHUV DUH WKH

EHVW H[DPSOH RI SDFNHW FDSWXUH V\VWHPV EXW

PDQ\ RWKHU W\SHV RI DSSOLFDWLRQV QHHG WR JUDE

SDFNHWV RII D QHWZRUN FDUG 7KRVH LQFOXGH

QHWZRUN VWDWLVWLFDO WRROV LQWUXVLRQ GHWHFWLRQ

‡ 7KH & SURJUDPPLQJ ODQJXDJH

‡ 7KH EDVLFV RI QHWZRUNLQJ DQG WKH 26, 5HIHU

HQFH 0RGHO

‡ +RZ FRPPRQ SURWRFROV OLNH (WKHUQHW 7&3 ,3

RU $53 ZRUN

KDNLQ

ZZZ KDNLQ RUJ HQ

3URJUDPPLQJ ZLWK /LESFDS

LHV LW IURP WKH FDUG EXIIHU WR D EORFN

RI PHPRU\ LQ NHUQHO VSDFH 7KHQ LW

GHWHUPLQHV ZKLFK W\SH RI SDFNHW KDV

EHHQ UHFHLYHG ORRNLQJ DW WKH HWKHU

W\SH ¿HOG RI WKH (WKHUQHW KHDGHU DQG

SDVVHV LW WR WKH DSSURSULDWH SURWRFRO

KDQGOHU LQ WKH SURWRFRO VWDFN ,Q PRVW

FDVHV WKH IUDPH ZLOO FRQWDLQ DQ ,3Y

GDWDJUDP VR WKH ,3Y SDFNHW KDQGOHU

ZLOO EH FDOOHG 7KLV KDQGOHU SHUIRUPV

D QXPEHU RI FKHFN WR HQVXUH IRU

H[DPSOH WKDW WKH SDFNHW LV QRW FRU

UXSW DQG WKDW LV DFWXDOO\ GHVWLQHG

IRU WKLV KRVW ,I DOO WHVWV DUH SDVVHG

WKH ,3 KHDGHUV DUH UHPRYHG DQG

WKH UHPDLQGHU LV SDVVHG WR WKH QH[W

SURWRFRO KDQGOHU SUREDEO\ 7&3 RU

8'3 7KLV SURFHVV LV UHSHDWHG XQWLO

WKH GDWD JHWV WR WKH DSSOLFDWLRQ OD\HU

ZKHUH LW LV SURFHVVHG E\ WKH XVHU

OHYHO DSSOLFDWLRQ

:KHQ ZH XVH D VQLIIHU SDFNHWV

JR WKURXJK WKH VDPH SURFHVV GH

VFULEHG DERYH EXW ZLWK RQH GLIIHU

HQFH WKH QHWZRUN GULYHU DOVR VHQGV

D FRS\ RI DQ\ UHFHLYHG RU WUDQVPLWWHG

SDFNHW WR D SDUW RI WKH NHUQHO FDOOHG

WKH SDFNHW ¿OWHU 3DFNHW ¿OWHUV DUH

ZKDW PDNHV SDFNHW FDSWXUH SRV

VLEOH %\ GHIDXOW WKH\ OHW DQ\ SDFNHW

WKURXJK EXW DV ZH ZLOO VHH ODWHU

WKH\ XVXDOO\ RIIHU DGYDQFHG ¿OWHULQJ

FDSDELOLWLHV $V SDFNHW FDSWXUH PD\

LQYROYH VHFXULW\ ULVNV PRVW V\VWHPV

UHTXLUH DGPLQLVWUDWRU SULYLOHJHV LQ

RUGHU WR XVH WKLV IHDWXUH )LJXUH

LOOXVWUDWHV WKH FDSWXUH SURFHVV

3\WKRQ -DYD & RU 5XE\ /LESFDS

UXQV RQ PRVW 81,; OLNH RSHUDWLQJ

V\VWHPV /LQX[ 6RODULV %6' +3

8; 7KHUH LV DOVR D :LQGRZV YHU

VLRQ QDPHG :LQSFDS 7RGD\ OLESFDS

LV PDLQWDLQHG E\ WKH 7FSGXPS *URXS

)XOO GRFXPHQWDWLRQ DQG VRXUFH FRGH

LV DYDLODEOH IURP WKH WFSGXPS V RI¿FLDO

VLWH DW KWWS ZZZ WFSGXPS RUJ KWWS

ZZZ ZLQSFDS RUJ IRU :LQSFDS

/LESFDS

/LESFDS LV DQ RSHQ VRXUFH OLEUDU\ WKDW

SURYLGHV D KLJK OHYHO LQWHUIDFH WR QHW

ZRUN SDFNHW FDSWXUH V\VWHPV ,W ZDV

FUHDWHG LQ E\ 0F&DQQH /HUHV

DQG -DFREVRQ ± UHVHDUFKHUV DW WKH

/DZUHQFH %HUNHOH\ 1DWLRQDO /DERUD

WRU\ IURP WKH 8QLYHUVLW\ RI &DOLIRUQLD DW

%HUNHOH\ DV SDUW RI D UHVHDUFK SURMHFW

WR LQYHVWLJDWH DQG LPSURYH 7&3 DQG

,QWHUQHW JDWHZD\ SHUIRUPDQFH

/LESFDS DXWKRUV PDLQ REMHFWLYH

ZDV WR FUHDWH D SODWIRUP LQGHSHQG

HQW $3, WR HOLPLQDWH WKH QHHG IRU

V\VWHP GHSHQGHQW SDFNHW FDSWXUH

PRGXOHV LQ HDFK DSSOLFDWLRQ DV YLU

WXDOO\ HYHU\ 26 YHQGRU LPSOHPHQWV

LWV RZQ FDSWXUH PHFKDQLVPV

7KH OLESFDS $3, LV GHVLJQHG WR

EH XVHG IURP & DQG & +RZHYHU

WKHUH DUH PDQ\ ZUDSSHUV WKDW DOORZ

LWV XVH IURP ODQJXDJHV OLNH 3HUO

2XU )LUVW 6WHSV

:LWK /LESFDS

1RZ WKDW ZH NQRZ WKH EDVLFV RI

SDFNHW FDSWXUH OHW XV ZULWH RXU RZQ

VQLI¿QJ DSSOLFDWLRQ

7KH ¿UVW WKLQJ ZH QHHG LV D QHW

ZRUN LQWHUIDFH WR OLVWHQ RQ :H FDQ

HLWKHU VSHFLI\ RQH H[SOLFLWO\ RU OHW

OLESFDS JHW RQH IRU XV 7KH IXQFWLRQ

FKDU SFDS B ORRNXSGHY FKDU HUUEXI

UHWXUQV D SRLQWHU WR D VWULQJ FRQWDLQ

LQJ WKH QDPH RI WKH ¿UVW QHWZRUN

GHYLFH WKDW LV VXLWDEOH IRU SDFNHW FDS

WXUH 8VXDOO\ WKLV IXQFWLRQ LV FDOOHG

ZKHQ HQG XVHUV GR QRW VSHFLI\ DQ\

QHWZRUN LQWHUIDFH ,W LV JHQHUDOO\

D EDG LGHD WR XVH KDUG FRGHG LQWHU

IDFH QDPHV DV WKH\ DUH XVXDOO\ QRW

SRUWDEOH DFURVV SODWIRUPV

" # $$

$ $ "

$& "

$ "

" &# "

" $ $

"% "

" & "

" !

# " !

)LJXUH (OHPHQWV LQYROYHG LQ WKH FDSWXUH SURFHVV

ZZZ KDNLQ RUJ HQ

KDNLQ

$WWDFN

7KH HUUEXI DUJXPHQW RI SFDS B

ORRNXSGHY LV D XVHU VXSSOLHG EXIIHU

WKDW WKH OLEUDU\ XVHV WR VWRUH DQ HUURU

PHVVDJH LQ FDVH VRPHWKLQJ JRHV

ZURQJ 0DQ\ RI WKH IXQFWLRQV LPSOH

PHQWHG E\ OLESFDS WDNH WKLV SDUDP

HWHU :KHQ DOORFDWLQJ WKH EXIIHU ZH

KDYH WR EH FDUHIXO EHFDXVH LW PXVW EH

DEOH WR KROG DW OHDVW 3&$3 B (55%8) B

6,=( E\WHV FXUUHQWO\ GH¿QHG DV

2QFH ZH KDYH WKH QDPH RI WKH

QHWZRUN GHYLFH ZH KDYH WR RSHQ

LW 7KH IXQFWLRQ SFDS B W SFDS B

RSHQ B OLYH FRQVW FKDU GHYLFH LQW

VQDSOHQ LQW SURPLVF LQW WR B PV

FKDU HUUEXI GRHV WKDW ,W UHWXUQV DQ

LQWHUIDFH KDQGOHU RI W\SH SFDS B W WKDW

ZLOO EH XVHG ODWHU ZKHQ FDOOLQJ WKH UHVW

RI WKH IXQFWLRQV SURYLGHG E\ OLESFDS

7KH ¿UVW DUJXPHQW RI SFDS B

RSHQ B OLYH LV D VWULQJ FRQWDLQLQJ

WKH QDPH RI WKH QHWZRUN LQWHUIDFH

ZH ZDQW WR RSHQ 7KH VHFRQG RQH

LV WKH PD[LPXP QXPEHU RI E\WHV WR

FDSWXUH 6HWWLQJ D ORZ YDOXH IRU WKLV

SDUDPHWHU PLJKW EH XVHIXO LQ FDVH

ZH DUH RQO\ LQWHUHVWHG LQ JUDEELQJ

KHDGHUV RU ZKHQ SURJUDPPLQJ IRU

HPEHGGHG V\VWHPV ZLWK LPSRUWDQW

PHPRU\ OLPLWDWLRQV 7\SLFDOO\ WKH

PD[LPXP (WKHUQHW IUDPH VL]H LV

E\WHV +RZHYHU RWKHU OLQN

W\SHV OLNH )'', RU KDYH ELJ

JHU OLPLWV $ YDOXH RI VKRXOG

EH HQRXJK WR KROG DQ\ SDFNHW IURP

DQ\ QHWZRUN

7KH RSWLRQ WR B PV GH¿QHV KRZ

PDQ\ PLOOLVHFRQGV VKRXOG WKH NHUQHO

ZDLW EHIRUH FRS\LQJ WKH FDSWXUHG

LQIRUPDWLRQ IURP NHUQHO VSDFH WR

XVHU VSDFH &KDQJHV RI FRQWH[W DUH

FRPSXWDWLRQDOO\ H[SHQVLYH ,I ZH DUH

FDSWXULQJ D KLJK YROXPH RI QHWZRUN

WUDI¿F LW LV EHWWHU WR OHW WKH NHUQHO

JURXS VRPH SDFNHWV EHIRUH FURVV

LQJ WKH NHUQHO XVHUVSDFH ERXQG

DU\ $ YDOXH RI ]HUR ZLOO FDXVH WKH

UHDG RSHUDWLRQV WR ZDLW IRUHYHU XQWLO

HQRXJK SDFNHWV DUULYHG WR WKH QHW

ZRUN LQWHUIDFH /LESFDS GRFXPHQWD

WLRQ GRHV QRW SURYLGH DQ\ VXJJHVWLRQ

IRU WKLV YDOXH 7R KDYH DQ LGHD ZH

FDQ H[DPLQH ZKDW RWKHU VQLIIHUV GR

7FSGXPS XVHV D YDOXH RI GVQLII

XVHV DQG HWWHUFDS GLVWLQJXLVKHV

EHWZHHQ GLIIHUHQW RSHUDWLQJ V\VWHPV

XVLQJ IRU /LQX[ RU 2SHQ%6' DQG

IRU WKH UHVW

7KH SURPLVF ÀDJ GHFLGHV ZKHWK

HU WKH QHWZRUN LQWHUIDFH VKRXOG EH

SXW LQWR SURPLVFXRXV PRGH RU QRW

7KDW LV ZKHWKHU WKH QHWZRUN FDUG

VKRXOG DFFHSW SDFNHWV WKDW DUH QRW

GHVWLQHG WR LW RU QRW 6SHFLI\ IRU

QRQ SURPLVFXRXV DQG DQ\ RWKHU

YDOXH IRU SURPLVFXRXV PRGH 1RWH

WKDW HYHQ LI ZH WHOO OLESFDS WR OLVWHQ

/LVWLQJ 6WUXFWXUH SFDSBSNWKGU

struct SFDSBSNWKGU ^

struct WLPHYDO WV 7LPHVWDPS RI FDSWXUH

ESIBXBLQW FDSOHQ 1XPEHU RI E\WHV WKDW ZHUH VWRUHG

ESIBXBLQW OHQ 7RWDO OHQJWK RI WKH SDFNHW

/LVWLQJ 6LPSOH VQLIIHU

6LPSOH 6QLIIHU

7R FRPSLOH JFF VLPSOHVQLIIHU F R VLPSOHVQLIIHU OSFDS

LQFOXGH SFDS K!

LQFOXGH VWULQJ K!

LQFOXGH VWGOLE K!

GH¿QH 0$;%<7(6 &$3785(

void SURFHVV3DFNHW XBFKDU DUJ const struct SFDSBSNWKGU SNWKGU const

XBFKDU SDFNHW ^

int L FRXQWHU int DUJ

SULQWI 3DFNHW &RXQW G ?Q FRXQWHU

SULQWI 5HFHLYHG 3DFNHW 6L]H G ?Q SNWKGU ! OHQ

SULQWI 3D\ORDG ?Q

for L L SNWKGU ! OHQ L ^

if LVSULQW SDFNHW > L @

SULQWI F SDFNHW > L @

else

SULQWI

if L L __ L SNWKGU ! OHQ

SULQWI ?Q

return

int PDLQ ^

int L FRXQW

SFDSBW GHVFU 18//

char HUUEXI > 3&$3B(55%8)B6,=( @ GHYLFH 18//

PHPVHW HUUEXI 3&$3B(55%8)B6,=(

*HW WKH QDPH RI WKH ¿UVW GHYLFH VXLWDEOH IRU FDSWXUH

GHYLFH SFDSBORRNXSGHY HUUEXI

SULQWI 2SHQLQJ GHYLFH V ?Q GHYLFH

2SHQ GHYLFH LQ SURPLVFXRXV PRGH

GHVFU SFDSBRSHQBOLYH GHYLFH 0$;%<7(6 &$3785( HUUEXI

/RRS IRUHYHU FDOO SURFHVV3DFNHW IRU HYHU\ UHFHLYHG SDFNHW

SFDSBORRS GHVFU SURFHVV3DFNHW XBFKDU FRXQW

return

KDNLQ

ZZZ KDNLQ RUJ HQ

$WWDFN

LQ QRQ SURPLVFXRXV PRGH LI WKH

LQWHUIDFH ZDV DOUHDG\ LQ SURPLVFX

RXV PRGH LW PD\ VWD\ WKDW ZD\ :H

VKRXOG QRW WDNH IRU JUDQWHG WKDW ZH

ZLOO QRW UHFHLYH WUDI¿F GHVWLQHG IRU

RWKHU KRVWV LQVWHDG LW LV EHWWHU WR

XVH WKH ¿OWHULQJ FDSDELOLWLHV WKDW OLE

SFDS SURYLGHV DV ZH ZLOO VHH ODWHU

2QFH ZH KDYH D QHWZRUN LQWHU

IDFH RSHQ IRU SDFNHW FDSWXUH ZH

KDYH WR DFWXDOO\ WHOO SFDS WKDW ZH

ZDQW WR VWDUW JHWWLQJ SDFNHWV )RU WKLV

ZH KDYH VRPH RSWLRQV

<RX DUH SUREDEO\ ZRQGHULQJ LI WKH

IXQFWLRQ RQO\ UHWXUQV DQ LQWHJHU ZKHUH

DUH WKH SDFNHWV WKDW ZHUH FDSWXUHG"

7KH DQVZHU LV D ELW WULFN\ SFDS B ORRS

GRHV QRW UHWXUQ WKRVH SDFNHWV LQVWHDG

LW FDOOV D XVHU GH¿QHG IXQFWLRQ HYHU\

WLPH WKHUH LV D SDFNHW UHDG\ WR EH UHDG

7KLV ZD\ ZH FDQ GR RXU RZQ SURFHVV

LQJ LQ D VHSDUDWH IXQFWLRQ LQVWHDG RI

FDOOLQJ SFDS B QH[W LQ D ORRS DQG

SURFHVV HYHU\WKLQJ LQVLGH +RZHYHU

WKHUH LV D SUREOHP ,I SFDS B ORRS

FDOOV RXU IXQFWLRQ KRZ FDQ ZH SDVV DU

JXPHQWV WR LW" 'R ZH KDYH WR XVH XJO\

JOREDOV" 7KH DQVZHU LV QR WKH OLESFDS

JX\V WKRXJKW DERXW WKLV SUREOHP DQG

LQFOXGHG D ZD\ WR SDVV LQIRUPDWLRQ WR

WKH FDOOEDFN IXQFWLRQ 7KLV LV WKH XVHU

DUJXPHQW 7KLV SRLQWHU LV SDVVHG LQ

HYHU\ FDOO 7KH SRLQWHU LV RI W\SH X B

FKDU VR ZH ZLOO KDYH WR FDVW LW IRU RXU

RZQ QHHGV ZKHQ FDOOLQJ SFDS B ORRS

DQG ZKHQ XVLQJ LW LQVLGH WKH FDOOEDFN

IXQFWLRQ 2XU SDFNHW SURFHVVLQJ IXQF

WLRQ PXVW KDYH D VSHFL¿F SURWRW\SH

RWKHUZLVH SFDS B ORRS ZRXOGQ W

NQRZ KRZ WR XVH LW 7KLV LV WKH ZD\ LW

VKRXOG EH GHFODUHG

VWUXFW SFDSBSNWKGU SNWKGU FRQVW XB

FKDU SDFNHW

7KH ¿UVW DUJXPHQW LV WKH XVHU SRLQWHU

WKDW ZH SDVVHG WR SFDS B ORRS WKH

VHFRQG RQH LV D SRLQWHU WR D VWUXFWXUH

WKDW FRQWDLQV LQIRUPDWLRQ DERXW WKH

FDSWXUHG SDFNHW /LVWLQJ VKRZV WKH

GH¿QLWLRQ RI WKLV VWUXFWXUH

7KH FDSOHQ PHPEHU KDV XVXDOO\

WKH VDPH YDOXH DV OHQ H[FHSW WKH

VLWXDWLRQ ZKHQ WKH VL]H RI WKH FDS

WXUHG SDFNHW H[FHHGV WKH VQDSOHQ

VSHFL¿HG LQ RSHQ B SFDS B OLYH

7KH WKLUG DOWHUQDWLYH LV WR XVH LQW

SFDS B GLVSDWFK SFDS B W S LQW FQW

SFDS B KDQGOHU FDOOEDFN X B FKDU

XVHU ZKLFK LV VLPLODU WR SFDS B

ORRS EXW LW DOVR UHWXUQV ZKHQ WKH

WR B PV WLPHRXW VSHFL¿HG LQ SFDS B

RSHQ B OLYH HODSVHV

/LVWLQJ SURYLGHV DQ H[DPSOH

RI D VLPSOH VQLIIHU WKDW SULQWV WKH

UDZ GDWD WKDW LW FDSWXUHV 1RWH WKDW

KHDGHU ¿OH SFDS K PXVW EH LQFOXGHG

(UURU FKHFNV KDYH EHHQ RPLWWHG IRU

FODULW\

‡ 7KH IXQFWLRQ FRQVW X B FKDU

SFDS B QH[W SFDS B W S VWUXFW

SFDS B SNWKGU K WDNHV WKH

SFDS B W KDQGOHU UHWXUQHG E\

SFDS B RSHQ B OLYH D SRLQWHU WR

D VWUXFWXUH RI W\SH SFDS B SNWKGU

DQG UHWXUQV WKH ¿UVW SDFNHW WKDW

DUULYHV WR WKH QHWZRUN LQWHUIDFH

‡ 7KH IXQFWLRQ LQW SFDS B

ORRS SFDS B W S LQW FQW

SFDS B KDQGOHU FDOOEDFN X B FKDU

XVHU LV XVHG WR FROOHFW SDFNHWV

DQG SURFHVV WKHP ,W ZLOO QRW UH

WXUQ XQWLO FQW SDFNHWV KDYH EHHQ

FDSWXUHG $ QHJDWLYH FQW YDOXH

ZLOO FDXVH SFDS B ORRS WR UHWXUQ

RQO\ LQ FDVH RI HUURU

2QFH

:H &DSWXUH D 3DFNHW

:KHQ D SDFNHW LV FDSWXUHG WKH RQO\

WKLQJ WKDW RXU DSSOLFDWLRQ KDV JRW LV

D EXQFK RI E\WHV 8VXDOO\ WKH QHW

ZRUN FDUG GULYHU DQG WKH SURWRFRO

VWDFN SURFHVV WKDW GDWD IRU XV EXW

ZKHQ ZH DUH FDSWXULQJ SDFNHWV IURP

RXU RZQ DSSOLFDWLRQ ZH GR LW DW WKH

ORZHVW OHYHO VR ZH DUH WKH RQHV LQ

FKDUJH RI PDNLQJ WKH GDWD UDWLRQDO

7R GR WKDW WKHUH DUH VRPH WKLQJV WKDW

VKRXOG EH WDNHQ LQWR DFFRXQW

YRLG IXQFWLRQBQDPH XBFKDU XVHUDUJ

FRQVW

'DWD /LQN 7\SH

$OWKRXJK (WKHUQHW VHHPV WR EH

SUHVHQW HYHU\ZKHUH WKHUH DUH D ORW RI

GLIIHUHQW WHFKQRORJLHV DQG VWDQGDUGV

WKDW RSHUDWH DW WKH GDWD OLQN OD\HU ,Q

RUGHU WR EH DEOH WR GHFRGH SDFNHWV

FDSWXUHG IURP D QHWZRUN LQWHUIDFH

ZH PXVW NQRZ WKH XQGHUO\LQJ GDWD

OLQN W\SH VR ZH DUH DEOH WR LQWHUSUHW

WKH KHDGHUV XVHG LQ WKDW OD\HU

7KH IXQFWLRQ LQW SF DS B

GDWDOLQN SFDS B W S UHWXUQV WKH OLQN

OD\HU W\SH RI WKH GHYLFH RSHQHG E\

SFDS B RSHQ B OLYH /LESFDS LV DEOH

WR GLVWLQJXLVK RYHU GLIIHUHQW OLQN

)LJXUH 1RUPDO SURJUDP ÀRZ RI D SFDS DSSOLFDWLRQ

)LJXUH 'DWD HQFDSVXODWLRQ LQ (WKHUQHW QHWZRUNV XVLQJ WKH 7&3 ,3

SURWRFRO

KDNLQ

ZZZ KDNLQ RUJ HQ

hakin9 - libpcap.pdf

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika: