Filter method and device for application layer network communication

A technology of application layer network and filtering method, which is applied in the field of filtering of network application program Socket communication, and can solve problems such as difficulty in LSP installation

Active Publication Date: 2012-10-17
XIAMEN WANGSU CO LTD
View PDF2 Cites 4 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to solve the above problems, and provides a filtering method for application layer network communication, which has the advantages of LSP but does not have the problem of difficult installation of LSP. It is mainly used in network agents and network accelerators, and can also be used in protocol analysis tools. , parental control software

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Filter method and device for application layer network communication
  • Filter method and device for application layer network communication
  • Filter method and device for application layer network communication

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0028] The present invention will be further described below in conjunction with the accompanying drawings and embodiments.

[0029] The first embodiment of the filtering method of application layer network communication

[0030] When using Non-IFS LSP for network data filtering, an LSP will be installed in the system, the following is the normal process:

[0031] (1) When the network application calls WinSockAPI, it must load ws2_32.dll

[0032] (2) Ws2_32.dll checks the registry and finds the LSP, assuming it is called mynonifslsp.dll, so Ws2_32.dll loads mynonifslsp.dll and calls the WSPStartup function implemented by mylsp.dll.

[0033] (3) mynonifslsp.dll also checks the registry and finds that the lower layer is BSP (Basic Service Provider), loads mswsock.dll, and then calls its WSPStartup function.

[0034] But as long as the LSP is installed, there will be troubles. It is found that the LSP is not installed, and the WinSock application we use must load the WinSock ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a filter method and device for application layer network communication. The method and the device have the advantages of an LSP (Layered Service Provider) and do not have installation difficulty of the LSP. The technical proposal is that the method comprises the following steps: a network application calls a window socket application program interface; a file system filter driver orientates a preset weight loading on a ws2_32.d 11 file to loading on a my ws2_32.d 11 file, wherein the ws2_32.d 11 file is from a Winsock 2.0 database; the my ws2_32.d 11 file directly calls utility functions in the ws2_32.d 11 file; the my ws2_32.d 11 file is operated, so that the file system driver orientates the weight loading on a real ws2_32.d 11 file to the loading for the ws2_32.d 11 file; and the ws2_32.d 11 file is operated.

Description

technical field [0001] The present invention relates to the filtering of Socket communication of network application programs, in particular to the communication filtering of application programs at the client side. Background technique [0002] Filtering technology is the basis for communication data analysis, firewalls, network agents, and network acceleration. These programs use some filtering technology to obtain data packets passed down from the upper layer. Those who do protocol analysis become analysis tools and risk assessment options. Those that pass or intercept become firewalls, those that forward them become proxy tools, and those that forward to fast proxy servers become accelerators. [0003] Common network filtering technologies on the Windows platform are arranged from high level to bottom level, mainly including: WinSock API Hook, LSP (Layered Service Provider, Layered Service Provider), TDI (Transport Driver Interface) driver, WFP (Windows Filtering Platfor...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
Inventor 洪珂郑明
Owner XIAMEN WANGSU CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products