军网中基于SNMP协议的网络系统的设计与实现
摘要
随着计算机技术和全球信息化建设的飞速发展,网络已进入人们工作、学习和生活的方方面面,网络应用日趋普及。当前,新技术、新设备层出不穷,网络中接入信息基础设施的数量不断增加,网络设备繁多,服务器厂商各异,加之病毒与网络攻击猖獗、网络侦听问题严重、网络设备地域跨度大等问题,使得网络管理难度日益增大。我军积极响应中央号召,大力提倡科技练兵,始终坚持科技强军的原则,在高科技和信息化建设方面投入了巨大的精力,网络运用在军队中已占有很大的比重。目前,军队的网络大部分为多级网络。其中包括军区级网络、军级网络、各师团级网络,各级网络之间,通过军网光纤专线进行连接。网络中的计算机大部分采用了包括windows、unix/linux等在内的操作系统,并包含了很多关键性的应用服务器,网络中的数据信息都属于军内机密信息,如果管理不善,一旦泄露或被破坏,将给全军带来无法估量的损失和影响。由于我军信息化建设起步晚,技术相对落后,管理中漏洞频出,缺乏自主的计算机网络软、硬件核心技术,计算机网络的管理软件,如网关软件等大多依赖进口。这些软件都存在大量的安全漏洞,极易留下嵌入式病毒、隐性通道等隐患,在网络上运行时,存在着很大的安全隐患。这使得军队计算机网络的安全性能大大降低,网络处于被窃听、干扰、监视和欺诈等多种安全威胁中,网络安全状态极为脆弱的。军队网络管理人员迫切需要一个实用的网络管理系统来帮助他们实时掌控网络的状态,监测网络故障及优化网络结构,以维护网络的正常稳定运行。为此,自主设计一套适于应用、安全性高、量身定做的网管系统显得尤为必要。
本文首先从网络管理所面临的问题与发展入手,介绍了网络管理的体系结构和管理功能域,分析比较了各网络管理技术,选择了网络管理平台的协议基础——简单网络管理协议SNMP,作为网络管理平台开发的协议基础,深入研究了SNMP的原理,从SNMP的发展、SNMP配置和通讯、MIB库、SMI、协议数据单元PDU,到WINDOWS下SNMP应用的开发,最后通过Virsul C++在WINDOWS环境下实现了基于SNMP的模块化的网络管理系统。本文具有很强的适应性和扩展性。系统基本实现了一般网络管理所需的主要功能,包括线路状态监视、流量测试和拓扑发现等。
Along with fly of the calculator technique and the world information-based construction soon development,the network have already get into people work, study and life of square aspect noodles,network application gradually universality.Current,new technique,new the equipments pile up one after another,in the network connect into the amount of information infrastructure continuously increment,network equipments numerous,server the manufacturer be each difference,add of virus and network attack rampant,network interception problem severity,network equipments the region across an one degree great etc.problem and make network management difficulty day by day enlarge.The our army is aggressive to respond to central call,strongly promote science and technology to train soldiers,always persistence science and technology strong soldier of principle,in the high technology and information-based construction aspect devotion huge energy,network usage in the troops already occupy very big of specific weight.Currently,the network of troops big part is many class network.Include a military district class network,soldier class network,each division class network among them,of all levels network,carry on a conjunction through the soldier net fiber optic special line.The big part adoption of the calculator in the network the operate system including windows,unix/linux etc.,and include a lot of decisive of application server,the data information in the network all belong to inside soldier secret information,if bad management,once reveal or drive break, will bring whole army can't estimate of loss and influence.Because the our army be information-based construction start night,the technique be opposite to fall behind,in the management loophole Pin,lack independence of the calculator network be soft,hardware core technique,calculator network of management software,such as net pass software etc.mostly dependence import.These software all existence a great deal of of safety loophole,easiest leave built-in virus,recessiveness passage...etc,concealed suffer from,at network top circulate,existence very big of safety concealed suffer from.This make troops calculator network of safety the function consumedly lower,the network be placed in to burglarize to listen to,interference,surveillance with cheat etc.variety safety threat medium,network safety appearance extremely weak of.Troops network manager urgent demand a practical network management the system come to help them solid hour control the appearance of network,monitor network break down and excellent turn network structure,with maintenance network of normal stability circulate.Is this,independence design a set of be suitable for application,safety Gao,tailor of net tube the system seem to be is necessity.
This text is from the network management first face of problem and development commence,introduction network management of system structure and management function area,analysis comparison each network management technique,choice network management terrace of agreement foundation-simple the network manage agreement SNMP and Be a network management terrace development of agreement foundation,thorough research SNMP principle,from the SNMP of development,SNMP allocation and communication,MIB database,SMI, agreement data unit PDU,arrive the WINDOWS descend SNMP application of development,end pass Virsul C++under the WINDOWS environment realization according to the network for turn of the SNMP mold piece management system.This stationery has very strong adaptability with expand sex.The system basic realization general network management need of main function,include circuit appearance surveillance,discharge test and the Tuo rush toward to discover etc..
本文首先从网络管理所面临的问题与发展入手,介绍了网络管理的体系结构和管理功能域,分析比较了各网络管理技术,选择了网络管理平台的协议基础——简单网络管理协议SNMP,作为网络管理平台开发的协议基础,深入研究了SNMP的原理,从SNMP的发展、SNMP配置和通讯、MIB库、SMI、协议数据单元PDU,到WINDOWS下SNMP应用的开发,最后通过Virsul C++在WINDOWS环境下实现了基于SNMP的模块化的网络管理系统。本文具有很强的适应性和扩展性。系统基本实现了一般网络管理所需的主要功能,包括线路状态监视、流量测试和拓扑发现等。
Along with fly of the calculator technique and the world information-based construction soon development,the network have already get into people work, study and life of square aspect noodles,network application gradually universality.Current,new technique,new the equipments pile up one after another,in the network connect into the amount of information infrastructure continuously increment,network equipments numerous,server the manufacturer be each difference,add of virus and network attack rampant,network interception problem severity,network equipments the region across an one degree great etc.problem and make network management difficulty day by day enlarge.The our army is aggressive to respond to central call,strongly promote science and technology to train soldiers,always persistence science and technology strong soldier of principle,in the high technology and information-based construction aspect devotion huge energy,network usage in the troops already occupy very big of specific weight.Currently,the network of troops big part is many class network.Include a military district class network,soldier class network,each division class network among them,of all levels network,carry on a conjunction through the soldier net fiber optic special line.The big part adoption of the calculator in the network the operate system including windows,unix/linux etc.,and include a lot of decisive of application server,the data information in the network all belong to inside soldier secret information,if bad management,once reveal or drive break, will bring whole army can't estimate of loss and influence.Because the our army be information-based construction start night,the technique be opposite to fall behind,in the management loophole Pin,lack independence of the calculator network be soft,hardware core technique,calculator network of management software,such as net pass software etc.mostly dependence import.These software all existence a great deal of of safety loophole,easiest leave built-in virus,recessiveness passage...etc,concealed suffer from,at network top circulate,existence very big of safety concealed suffer from.This make troops calculator network of safety the function consumedly lower,the network be placed in to burglarize to listen to,interference,surveillance with cheat etc.variety safety threat medium,network safety appearance extremely weak of.Troops network manager urgent demand a practical network management the system come to help them solid hour control the appearance of network,monitor network break down and excellent turn network structure,with maintenance network of normal stability circulate.Is this,independence design a set of be suitable for application,safety Gao,tailor of net tube the system seem to be is necessity.
This text is from the network management first face of problem and development commence,introduction network management of system structure and management function area,analysis comparison each network management technique,choice network management terrace of agreement foundation-simple the network manage agreement SNMP and Be a network management terrace development of agreement foundation,thorough research SNMP principle,from the SNMP of development,SNMP allocation and communication,MIB database,SMI, agreement data unit PDU,arrive the WINDOWS descend SNMP application of development,end pass Virsul C++under the WINDOWS environment realization according to the network for turn of the SNMP mold piece management system.This stationery has very strong adaptability with expand sex.The system basic realization general network management need of main function,include circuit appearance surveillance,discharge test and the Tuo rush toward to discover etc..
引文
[1]Andrew S.Tanenbaum,熊桂喜、王小虎译,“7.3 SNMP-简单网络管理协议”,《计算机网络》,p487-p497;
[2]张怀宁主编,“第8章 网络管理”,《互联网技术》,重庆大学出版社,p183-p192,2002年8月;
[3]Chris Lewis,潇湘工作室译,Cisco TCP/IP路由管理专业参考
[4]Mani Subramanian,NETWORK MANAGEMENT Principles and Practice,高等教育出版社,2001年8月;
[5]Ellie Quigley,杜炜译,Perl实例精解(第三版),清华大学出版社,2002年8月;
[6]http://www.SNMPlink.org;
[7]http://www.gxSNMP.org/rfc/;
[8]SNMPv3:SNMP网络协议的新标准,作者不详,见中国电信网站,http://www.chinatelecom.com.cn/20030325/00006707.html;
[9]浅析SNMP三个发展阶段的安全机制,作者不详,见中国电信网站,http://www.chinatelecom.com.cn/20030213/00005673.html;
[10]张晓鹏,漫谈SNMP网络管理,见电信科学技术第十研究所网站,http://www.ydshs.com/keyan/2003-3/4.htm;
[11]李旻,基于SNMP协议的校园网络管理研究,万方数据库学位论文,昆明理工大学图书馆,馆藏号Y404136,授学位单位:上海理工大学,2000年11月;
[12]王焕然SNMP网络管理综述小型微型计算机[J].系统.2004.5.Vol.25 No.3;
[13]李浚WinSock2网络编程实用教程[M].北京:清华大学出版社,2003;
[14]岑贤道,安常青。网络管理协议及应用开发[M].北京:清华大学出版社,1998;
[15]顾兆军,基于协议分析的SNNP管理信息库可视化[J],计算机工程.2004;
[16]程妍SNMPv3新增安全机制的研究与实现[J],计算机工程与应用2004;
[17]
[19]李新国。计算机网络与Windows 2000实用教程北京:科学出版社,2004。
[20][美]David Zeltserman.SNMPv3与网络管理[M],北京:人民邮电出版社.2000;
[21]徐大海,刘新。王奇,白英彩。网络拓扑自动搜索算法研究[J],计算机应用,Vol.19,NO.2 Feb.1999;
[22]武孟军著,Visum C++开发基于SNMP的网络管理软件。北京:人民邮电出版社,2007年;
[23]B.Wijnen,R.Presuhn,K.McCloghrie View-based Control Model(VACM)for the Simple Network Management Protocol(SNMP)[S],FRC3415,December2002;
[24]Case J,Fedor M,Schofstall M,etal.A simple network management protocol.(SNMP),RFC1157,SNMP Research,Performance Systems International,and MIT laboratory for Computer Science,1990;
[25]William Stallings.著SNMP网络管理[M],北京:中国电力出版社,2000年;[23]
[26][美]Mark A.Miller.著用SNMP管理互联网络(第三版)[M].北京:中国电力出版社,2001年,20-46;
[27]The SNMPv2 Working Group,Case,J.McCloghrie,K,Rose.,M.,and Waldbusser,S.,Protocol Operations for Version 2 of the Simple Network Management Protocol(SNMPv2),RFC1905,January 1996;[26]
[28]K.McCloghrie,M.Rose(Editors),Management Information Base for Network Management of TCP/IP-based internets:MIB-Ⅱ RFC1213,March 1991;
[29]Windows SNMP Manager Application Programming Interface,Microsoft Developer Network.MicrosoftCorp.1999;
[30]D.Levi,P.Meyer,B.Stewart Simple Network Management Protocol(SNMP)Applications[S],RFC3413,December2002;
[31]J.Case,D.Harrington,R.Presuhn,B.Wijnen,Message Processing and Dispatching for the SNMP,RFC3412,2002;
[2]张怀宁主编,“第8章 网络管理”,《互联网技术》,重庆大学出版社,p183-p192,2002年8月;
[3]Chris Lewis,潇湘工作室译,Cisco TCP/IP路由管理专业参考
[4]Mani Subramanian,NETWORK MANAGEMENT Principles and Practice,高等教育出版社,2001年8月;
[5]Ellie Quigley,杜炜译,Perl实例精解(第三版),清华大学出版社,2002年8月;
[6]http://www.SNMPlink.org;
[7]http://www.gxSNMP.org/rfc/;
[8]SNMPv3:SNMP网络协议的新标准,作者不详,见中国电信网站,http://www.chinatelecom.com.cn/20030325/00006707.html;
[9]浅析SNMP三个发展阶段的安全机制,作者不详,见中国电信网站,http://www.chinatelecom.com.cn/20030213/00005673.html;
[10]张晓鹏,漫谈SNMP网络管理,见电信科学技术第十研究所网站,http://www.ydshs.com/keyan/2003-3/4.htm;
[11]李旻,基于SNMP协议的校园网络管理研究,万方数据库学位论文,昆明理工大学图书馆,馆藏号Y404136,授学位单位:上海理工大学,2000年11月;
[12]王焕然SNMP网络管理综述小型微型计算机[J].系统.2004.5.Vol.25 No.3;
[13]李浚WinSock2网络编程实用教程[M].北京:清华大学出版社,2003;
[14]岑贤道,安常青。网络管理协议及应用开发[M].北京:清华大学出版社,1998;
[15]顾兆军,基于协议分析的SNNP管理信息库可视化[J],计算机工程.2004;
[16]程妍SNMPv3新增安全机制的研究与实现[J],计算机工程与应用2004;
[17]
[19]李新国。计算机网络与Windows 2000实用教程北京:科学出版社,2004。
[20][美]David Zeltserman.SNMPv3与网络管理[M],北京:人民邮电出版社.2000;
[21]徐大海,刘新。王奇,白英彩。网络拓扑自动搜索算法研究[J],计算机应用,Vol.19,NO.2 Feb.1999;
[22]武孟军著,Visum C++开发基于SNMP的网络管理软件。北京:人民邮电出版社,2007年;
[23]B.Wijnen,R.Presuhn,K.McCloghrie View-based Control Model(VACM)for the Simple Network Management Protocol(SNMP)[S],FRC3415,December2002;
[24]Case J,Fedor M,Schofstall M,etal.A simple network management protocol.(SNMP),RFC1157,SNMP Research,Performance Systems International,and MIT laboratory for Computer Science,1990;
[25]William Stallings.著SNMP网络管理[M],北京:中国电力出版社,2000年;[23]
[26][美]Mark A.Miller.著用SNMP管理互联网络(第三版)[M].北京:中国电力出版社,2001年,20-46;
[27]The SNMPv2 Working Group,Case,J.McCloghrie,K,Rose.,M.,and Waldbusser,S.,Protocol Operations for Version 2 of the Simple Network Management Protocol(SNMPv2),RFC1905,January 1996;[26]
[28]K.McCloghrie,M.Rose(Editors),Management Information Base for Network Management of TCP/IP-based internets:MIB-Ⅱ RFC1213,March 1991;
[29]Windows SNMP Manager Application Programming Interface,Microsoft Developer Network.MicrosoftCorp.1999;
[30]D.Levi,P.Meyer,B.Stewart Simple Network Management Protocol(SNMP)Applications[S],RFC3413,December2002;
[31]J.Case,D.Harrington,R.Presuhn,B.Wijnen,Message Processing and Dispatching for the SNMP,RFC3412,2002;