这是老外对网络分析的认识：
Uses
The versatility of packet sniffers means they can be used to:
- Analyze network problems.
- Detect network intrusion attempts.
- Gain information for effecting a network intrusion.
- Monitor network usage.
- Gather and report network statistics.
- Filter suspect content from network traffic.
- Spy on other network users and collect sensitive information such as passwords (depending on any content encryption methods which may be in use)
- Reverse engineer protocols used over the network.
- Debug client/server communications.
- Debug network protocol implementations.
利用
多功能网络分析意味着它们可用于：
分析网络问题。检测网络入侵企图。
获取信息实行网络入侵。
监控网络使用情况。
收集和报告网络的统计资料。
过滤可疑的内容，网络流量。
窥探其他网络用户，并收集敏感信息，如密码（取决于任何内容加密方法可使用）
反向工程协议利用网络。
调试客户机/服务器通信。
调试网络协议的实施。
Example uses
- A packet sniffer for a token ring network could detect that the token has been lost or the presence of too many tokens (verifying the protocol).
- A packet sniffer could detect that messages are being sent to a network adapter; if the network adapter did not report receiving the messages then this would localize the failure to the adapter.
- A packet sniffer could detect excessive messages being sent by a port, detecting an error in the implementation.
- A packet sniffer could collect statistics on the amount of traffic (number of messages) from a process detecting the need for more bandwidth or a better method.
- A packet sniffer could be used to extract messages and reassemble into a complete form the traffic from a process, allowing it to be reverse engineered.
- A packet sniffer could be used to diagnose operating system connectivity issues like web,ftp,sql,active directory,etc.
- A packet sniffer could be used to analyse data sent to and from secure systems in order to understand and circumvent security measures, for the purposes of penetration testing or illegal activities
实例使用
一网络分析的令牌环网络可以检测到令牌已遗失或存在太多的凭证（核查协议） 。
一网络分析能够侦测到的信息发送给网络适配器，如果网络适配器没有报告接收邮件然后将本地化失败的转接器。
一网络分析能够探测过多的信息发送到一个端口，检测中的一个错误的执行。
一网络分析能够收集统计量（邮件数量）由侦查过程需要更多的带宽，或一个更好的方法。
一网络分析可以用来提取邮件和组装成一个完整的交通形式从一个过程，允许它是逆向工程。
一网络分析可以用来诊断作业系统的连接问题，如网站， FTP等数据库，活动目录等
一网络分析可以用来分析数据发送到从安全系统，以便了解和规避保安措施的目的，渗透测试或非法活动 |
发表于 2007-8-14 13:47:46
