Event

从libnids得到TCP重组的数据，当libnids的状态为NIDS_JUST_EST时，表示TCP建立连接，在此时给TCP流增加一个flow_id用来标识此连接；当libnids的状态为NIDS_DATA时，表示接受数据，当有新的数据到达时，根据flow_id把数据push到相应的流表中，为之后的数据分析做准备。因此，可以在此框架上增加符合http协议的应用解析(Data TCP libnids restructuring, when libnids status to NIDS_JUST_EST, said the TCP connection is established, at the same time adds a flow_id to TCP flow is used to identify this connection When libnids status to NIDS_DATA, accepted data, when new data arrives, according to flow_id to push data to the corresponding flow table, prepare the way for after data analysis. Can be increased on this framework, therefore, in accordance with the application of the HTTP protocol parsing)

mail to server mail to server mail to server mail to server mail to server mail to server (mail to server mail to server mail to server mail to server mail to server )

说明：  本程序是window平台下，使用virtual C++编写文件下载程序，使用了Http协议(This program is a window platform, use the virtual C++ writing the file download process, using Http protocol)

Opc use the software, use VB programming

客户端连接服务器的程序，以此测试客户端是否连接上。(client programming source)

在局域网内抓取所需要的IP数据包，使用VC++6.0工程编写。(Grab the required IP packets in the LAN.)

A new method of propagation for computer viruses is here presented, Automated File Transfer Infection (AFTI). This method is specific for the Microsoft® Windows® NT/2000/XP/Server 2003 platforms, albeit it may be extended to the 95/98/ME systems as well, and even other Operating Systems. It is based upon WinSock 2 hooking with the Service Provider Interface (SPI).(A new method of propagation for computer vi ruses is here presented. Automated File Transfer Infection (AFTI). Thi 's method is specific for the Microsoft)

检测NAT类型的客户端，程序中指定了服务器IP地址，用户可以自行修改(Detect NAT type of the client, the program specifies the server IP address, the user can modify)

基于udp实现可靠传输的原理实现了一个简易的邮件系统。存储利用文件来实现，不涉及数据库。(Udp achieve reliable transmission based on the principle of achieving a simple mail system. Storage of papers to achieve, does not involve a database.)

说明：  基于EXOSIP协议的SIP软终端，可以实现终端向代理服务器的注册请求(SIP-based softphone EXOSIP agreement can be achieved terminal registration request to the proxy server)