Passive finding equipment and method of network topology

Abstract

The invention discloses passive finding equipment and a passive finding method based on sniffing and fingerprint technology of network topology. The equipment comprises sniffing devices and a management device, wherein a plurality of sniffing devices are arranged in a network to be found, are directly connected with a host computer of each subnet host exchange, acquire all network element information and routing information from a subnet data packet and transmit the element information and the routing information serving as topology finding information to the management device; and the management device is arranged on any host computer which is not provided with any sniffing device, and is used for managing, summarizing and analyzing the sniffing devices and information acquired by the sniffing devices and drawing and displaying a network topology diagram of the entire network to be found. In the method, topology is found in a passive mode, so that additional data load on the network in a finding period is greatly lowered, and an acquired network data packet is a practical communication action and is correct and reliable. A network topology finding process can be controlled flexibly; through manual setting of the management device, start and stop of all sniffing devices can be controlled conveniently and flexibly; and the equipment and the method have good popularization prospects.

Description

technical field [0001] The present invention relates to a passive discovery device of network topology and its discovery method, to be precise, relates to a passive discovery device of network topology based on sniffing and fingerprint technology and its discovery method; it belongs to the technology of information security and computer operating system field. Background technique [0002] Firstly, the current status of network topology discovery technology is introduced: as we all know, the network is composed of a large number of network element entities working together to provide certain services to users. The functions of these network element entities are supported by hardware and software. The network element entities in the real network include: routers, servers, hosts, links, etc. All of these network elements will affect the operation mode of the network and the quality of service provided to end users. . Since the 1990s, more and more enterprises and individuals...

AI Technical Summary

Problems solved by technology

The disadvantages of this method are obvious, the most important of which is strong dependence. Different protocols require different formats of packet requests, which increases the complexity of topology discovery.

Images