基于旁路的web访问监控系统的设计与实现-毕设论文.doc

论文题目：基于旁路的Web访问监控系统的设计与实现学生姓名：指导教师：摘要在实验室或者办公室，管理员总是希望学生或员工可以专心自己的任务，而不去浏览观看与学习或工作无关的网页或网站。因而，当学生或员工输入无关网址时，管理员的服务器可以抢在其打开网页前与其进行“握手”并发送管理员提前准备好的页面，从而阻止了其正常访问，提高了学习工作效率。首先介绍了不良网站对于正常网络的入侵以及危害，通过把网卡设置为混杂模式实现了捕获数据包的操作，从而有效的对于整个网络进行监听，通过IP包过滤模块把HTTP中除GET包和POST包过滤掉，提取出URL地址，然后与事先准备的数据库黑名单网址进行匹配，来判断出哪些是对工作或学习无关的网址，进而拦截其访问，达到了净化网络环境的目的。最后，针对该系统实施了详细的性能和功能的测试，使功能完整，且系统的性能有一定的优化。关键词：混杂模式捕获数据包网页Title:BaseonthebypasswebaccessmontitoringsystemdeisignandimplementationName:Supervisor:AbstractInthelaboratoryoroffice,administratorsoremployeescanalwaysexpectstudentstoconcentrateontheirowntasks,ratherthantobrowsewatchandstudyorworkunrelatedpagesorsites.Thus,whenstudentsorstaffindependentoftheinputURL,theserveradministratorcangrabitonthepageinfrontoftheir"handshake"preparedinadvanceandsendtheadministratorpage,thuspreventingitsnormalaccess,improvethelearningefficiency.Firstintroducedthebadsitesfornormalnetworkintrusionanddamage,thecardissetbytheoperatortoachieveapacketcapturetopromiscuousmode,soastoeffectivelymonitortheentirenetworkthroughIPpacketfilteringmoduleinadditiontotheHTTPGETandPOSTpackagepacketfiltertoextracttheURLaddress,andthenpreparedadatabasewithURLblacklistmatchingtodeterminewhichisunrelatedtoworkorstudysite,thusblockingitsaccesstothenetworkenvironmenttoachievethepurposeofpurification.Finally,adetailedembodimentofthesystemfortestingtheperformanceandfunctionality,sothatthefunctionalintegrityandperformanceofthesystemwithsomeoptimization.KEYWORDS:Librarymanagementsystem;Cache;efficientTOC\o"1-4"\h\uHYPERLINK\l_Toc193761绪论1HYPERLINK\l_Toc149681.1课题背景PAGEREF_Toc149686HYPERLINK\l_Toc166771.2国内外发展现状PAGEREF_Toc166776HYPERLINK\l_Toc301431.3本文主要任务PAGEREF_Toc301438HYPERLINK\l_Toc309721.4论文的组织结构PAGEREF_Toc309728HYPERLINK\l_Toc233832.相关知识理论PAGEREF_Toc233839HYPERLINK\l_Toc170232.1OSI参考模型PAGEREF_Toc170239HYPERLINK\l_Toc288782.2TCP/IP体系结构PAGEREF_Toc2887810HYPERLINK\l_Toc278222.3OSI与TCP/IP的比较PAGEREF_Toc2782211HYPERLINK\l_Toc302182.4H