By-path interdiction TCP connection

Abstract

The present invention provides a method, which is used for blocking TCP connection of a network in the bypass way. The method can be used in the fields of network security, network management, network access control, and so on. A monitoring device is arranged in a local area network, which is used for monitoring for the network through a hub or the mirror port of an exchanger. When the connection of a TCP needs blocking, an imitative TCP data packet with a RST sign is assembled according to the monitored information of TCP connection; the data packet is then directly transmitted to a link layer. The machine which has the connection to be blocked receives the imitative TCP data packet, and considers that the other end of the connection has transmitted the information of resetting the connection. According to standard protocols, the operating system can automatically disconnect the TCP. Thus the application program with the connection can be disconnected, which achieves the purpose of blocking the illegal network visit.

Description

technical field [0001] The invention is a method for blocking the TCP connection on the network in a bypass mode. It can be used in the fields of network security, network management and network access control. Background technique [0002] At present, in the internal office network of small and medium-sized enterprises, it is necessary to monitor the network usage in the fields of employee network access control, content filtering, content auditing, and network security. Generally, the bypass monitoring method is used to reduce the burden on the gateway or router. But the control function of the bypass has been compromised. The invention can realize the function of blocking a specific TCP connection in the bypass through the way of forging data packets, thereby solving the functional defect of the bypass monitoring mode. Contents of the invention [0003] The purpose of the invention is to solve the problem that the TCP connection cannot be blocked in the bypass monito...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to solve the problem that the TCP connection cannot be blocked under the bypass monitoring mode of the network

Images