【摘要】 当前,非法攻击者在实施网络攻击时,通常会采用伪IP地址来转发数据包。对于这一类信源终端,目前还没有有效、实时的追踪和定位方法。本文分析了几种典型的IP地址追踪方法,指出其存在实时性、依赖性等缺点,提出了一种对IP地址转换之前的"跳板机"的原始数据包缓存进行分析,从而获取真实IP地址的方法,具有较好的实时性与自主性。更多还原

【Abstract】 At present,illegal attackers,when attacking,usually transmit data packets by using forged IP addresses.So far,there have been no effective methods to do realtime tracing and locating of such kind of the terminal of message senders.This paper analyzes several typical IP address tracing method,pointing out the existence of real-time,dependence and other shortcomings,puts forward a kind of IP address before the conversion of " springboard computers " of the original packet buffer analysis method,in order to obtain the real IP address,with real-time and better independence.更多还原