CN106413004A - Wireless MAC sniffing scanning method and apparatus - Google Patents

Wireless MAC sniffing scanning method and apparatus Download PDF

Info

Publication number
CN106413004A
CN106413004A CN201610802925.7A CN201610802925A CN106413004A CN 106413004 A CN106413004 A CN 106413004A CN 201610802925 A CN201610802925 A CN 201610802925A CN 106413004 A CN106413004 A CN 106413004A
Authority
CN
China
Prior art keywords
data packet
probe data
kernel
hash table
mac address
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201610802925.7A
Other languages
Chinese (zh)
Inventor
曹选明
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shanghai Feixun Data Communication Technology Co Ltd
Original Assignee
Shanghai Feixun Data Communication Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shanghai Feixun Data Communication Technology Co Ltd filed Critical Shanghai Feixun Data Communication Technology Co Ltd
Priority to CN201610802925.7A priority Critical patent/CN106413004A/en
Publication of CN106413004A publication Critical patent/CN106413004A/en
Pending legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W28/00Network traffic management; Network resource management
    • H04W28/02Traffic management, e.g. flow control or congestion control
    • H04W28/10Flow control between communication endpoints
    • H04W28/14Flow control between communication endpoints using intermediate storage
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46Multiprogramming arrangements
    • G06F9/50Allocation of resources, e.g. of the central processing unit [CPU]
    • G06F9/5005Allocation of resources, e.g. of the central processing unit [CPU] to service a request
    • G06F9/5027Allocation of resources, e.g. of the central processing unit [CPU] to service a request the resource being a machine, e.g. CPUs, Servers, Terminals
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/74Address processing for routing
    • H04L45/745Address table lookup; Address filtering
    • H04L45/7453Address table lookup; Address filtering using hashing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/50Queue scheduling
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W48/00Access restriction; Network selection; Access point selection
    • H04W48/08Access restriction or access information delivery, e.g. discovery data delivery
    • H04W48/10Access restriction or access information delivery, e.g. discovery data delivery using broadcasted information

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The present invention provides a wireless MAC sniffing scanning method and apparatus. The wireless MAC sniffing scanning method comprises: S1, capturing a detection data packet sent by a terminal; S2, softly interrupting a kernel of a wireless access device; S3, caching the detection data packet in a buffer, and generating a detection data packet record; S4, ending soft interruption of the kernel of the wireless access device, and normally running the wireless access device; and S5, reading, by a preset kernel thread, the detection data packet record from the buffer, and processing the detection data packet record. A large-operand data processing process is transferred to a pre-added kernel process for processing, thereby effectively avoiding the problem of over-long occupation time of soft interruption of the kernel due to data processing.

Description

A kind of wireless MAC sniff scan method and its device
Technical field
The present invention relates to communication technical field, more particularly, to a kind of wireless MAC sniff scan method and its device.
Background technology
In radio systems, for the ease of the deployment of wireless system AP (Access Point, access points), need Whether there is not associated AP and the wireless terminal having associated this AP near solution AP, thus providing more accurate wireless service, this One process is accomplished by realizing by AP scan function, and typically we will be called wireless MAC (Media Access this function Control, media access control) sniff scanning, scans the information obtaining and includes MAC Address, RSSI (Received Signal Strength Indication, received signal strength) and bottom of making an uproar.
The scanning of wireless MAC sniff is wide by intercepting and capturing the probe req (probe requests thereby) of wireless terminal/not associated AP transmission Broadcast bag, to obtain the information of wireless terminal/not associated AP.But what packet receiving was realized generally by soft interrupt mechanism, that is, Often receive a bag and all can produce traps, but, in kernel, traps can not be taken for a long time.
Correspondingly produce traps if often receiving a probe req broadcast packet, then wide for probe req Broadcast bag and directly report consumer process, although this process will not allow traps overlong time, if whole region exist a large amount of When wireless terminal/not associated AP sends probe req broadcast packet simultaneously, kernel can be led to ceaselessly to disappear as consumer process sends Breath;And receive the bag that probe req broadcast packet occurs that more MAC Address repeats, a large amount of MAC Address undoubtedly can be reported to repeat Garbage, the communication port not only consuming a large amount of kernel CPU but also excessively taking between inner nuclear layer and client layer.
In addition, if often receiving a probe req broadcast packet just produce traps, then filter all middle phase of MAC Same bag is cached to queue again, and this process will lock to queue for the concordance of data;And the lookup of data, insert, delete Except waiting operation all will take traps duration, it is easily caused traps and extremely leads to Kernel Panic.
Content of the invention
For the problems referred to above, the invention provides a kind of wireless MAC sniff scan method and its device, efficiently solve and grab Take kernel traps holding time long problem during probe data packet.
The technical scheme that the present invention provides is as follows:
A kind of wireless MAC sniff scan method, is applied to radio reception device, including:
S1 captures the probe data packet that terminal sends;
S2 radio reception device kernel enters traps;
Probe data packet is put into relief area and is entered row cache by S3, and generates probe data packet record;
S4 radio reception device kernel terminates traps, normal operation;
S5 presets kernel thread and is processed from relief area reading probe data packet record.
In the technical program, radio reception device grab terminal transmission probe data packet after with will its caching Enter in relief area, rather than immediately probe data packet is processed;Afterwards, using default kernel thread to the data detecting Bag is processed.Processed in the kernel process adding in advance that data handling procedure big for operand is transferred to, effectively Avoid and the long problem of kernel traps holding time is led to due to data processing.
It is further preferred that specifically including in step s3, detection count off evidence being put into buffer circle and enters row cache.
In the technical program, default kernel thread and kernel traps pass through buffer circle shared data, and buffer Area is the buffer circle of no lock, the traps program run will not be had any impact, effectively carry in radio reception device The high stability of system.
It is further preferred that specifically including in step s 5:
S51 presets kernel thread and reads relief area, obtains probe data packet record;
The probe data packet record that S52 parsing reads, and the probe data packet record of MAC Address repetition was carried out Filter;
The MAC Address based on probe data packet for the S53 changes kernel Hash table;
S54 report change after kernel Hash table to user's space.
In the technical program, in default kernel thread, filtration treatment is carried out to probe data packet, will be wireless with this The kernel isolation of access device, if processing procedure goes wrong, simply presets kernel thread and goes wrong, be not result in that kernel collapses Burst, improve the stability of system.
It is further preferred that in step S52, also parsing the background noise of probe data packet and reception in every record Time, and launch the signal intensity of this probe data packet terminal.
It is further preferred that specifically including in step S53:
MAC Address based on probe data packet makes a look up in current inner Hash table;
If finding identical MAC Address in current inner Hash table, the signal updating the association of this MAC Address is strong Degree, background noise and reception time;
If not finding identical MAC Address in current inner Hash table, by the MAC Address of this probe data packet, Signal intensity, background noise and reception time form new record insertion current inner Hash table.
It is further preferred that specifically including in step S54:
In kernel Hash table after change, pre-set space is completely or default report cycle is overtime, reports kernel Hash table after change To user's space.
Present invention also offers a kind of wireless MAC sniff scanning means, it is applied to radio reception device, including:
Packet handling module, for capturing the probe data packet of terminal transmission;
Kernel traps module, the probe data packet traps radio reception device being grabbed based on packet handling module Kernel;
Cache module, for, after radio reception device kernel traps, data cached bag handling module detects Probe data packet, and generate probe data packet record;
Kernel traps terminate module, after buffering into cache module in probe data packet, terminate wireless access and set The traps of standby kernel;
Data processing module, is processed for reading probe data packet record from relief area.
In the technical program, packet handling module grab terminal transmission probe data packet after with will its delay It is stored in cache module, rather than immediately probe data packet is processed;Afterwards, using data processing module (kernel process) The packet detecting is processed.The data processing mould adding in advance that data handling procedure big for operand is transferred to Processed in block (kernel process), effectively prevent and kernel long the asking of traps holding time is led to due to data processing Topic.
It is further preferred that described cache module is a buffer circle.
In the technical program, relief area is the buffer circle of no lock, will not be soft to run in radio reception device Interrupt routine has any impact, and effectively increases the stability of system.
It is further preferred that data processing module includes:
Data-reading unit, for reading relief area, obtains probe data packet record;
Resolve packet unit, for parsing the probe data packet record reading, obtains the MAC ground of probe data packet Location;The analysis result of concrete probe data packet record includes:The MAC Address of probe data packet in every record, background noise and The reception time, and launch the signal intensity of this probe data packet terminal;
Packet Filtering unit, detection number MAC Address being repeated based on the MAC Address that resolve packet unit resolves go out Filtered according to bag record;
Hash table changing unit, changes kernel Hash table based on the MAC Address that resolve packet unit resolves go out;
Hash table reporting unit, for reporting to user's space by the kernel Hash table after change.
In the technical program, in data processing module (default kernel thread), probe data packet is carried out at filtration Reason, with this by the kernel isolation of radio reception device, if processing procedure goes wrong, simply presets kernel thread and goes wrong, It is not result in Kernel Panic, improve the stability of system.
It is further preferred that also including a MAC Address searching unit in data processing module, based on probe data packet MAC Address makes a look up in current inner Hash table;
If finding identical MAC Address in current inner Hash table, Hash table changing unit updates this MAC Address The signal intensity of association, background noise and reception time;
If not finding identical MAC Address in current inner Hash table, Hash table changing unit is by this detection number Form new record insertion current inner Hash table according to the MAC Address of bag, signal intensity, background noise and reception time.
In the wireless MAC sniff scan method that the present invention provides and its device, in the detection data of crawl terminal transmission Add a kernel thread in kernel before bag;Afterwards, the probe data packet grabbing directly is put in relief area and carry out Caching;Finally, the probe data packet that default kernel thread reads in this relief area is processed to it.By data big for operand Processed in the kernel process adding in advance that processing procedure is transferred to, effectively prevent and lead to kernel soft due to data processing Interrupt the long problem of holding time.The kernel of radio reception device is isolated, if processing procedure goes wrong, simply in advance simultaneously If kernel thread goes wrong, it is not result in Kernel Panic, improve the stability of system.
Brief description
Below by the way of clearly understandable, preferred implementation is described with reference to the drawings, to above-mentioned characteristic, technical characteristic, Advantage and its implementation are further described.
Fig. 1 is wireless MAC sniff scan method schematic flow sheet in the present invention;
Fig. 2 is that in the present invention, default kernel thread processes probe data packet schematic flow sheet;
Fig. 3 is wireless MAC sniff scanning means schematic diagram in the present invention;
Fig. 4 is data processing module a kind of embodiment schematic diagram in the present invention;
Fig. 5 is data processing module another embodiment schematic diagram in the present invention.
Drawing reference numeral explanation:
100- wireless MAC sniff scanning means, 110- packet handling module, 120- kernel traps module, 130- delays Storing module, 140- kernel traps terminate module, 150- data processing module, 151- data-reading unit, 152- packet solution Analysis unit, 153- Packet Filtering unit, 154- Hash table changing unit, 155- Hash table reporting unit, 156-MAC looks into address Look for unit.
Specific embodiment
In order to be illustrated more clearly that the embodiment of the present invention or technical scheme of the prior art, brief description will be compareed below The specific embodiment of the present invention.It should be evident that drawings in the following description are only some embodiments of the present invention, for For those of ordinary skill in the art, on the premise of not paying creative work, other can also be obtained according to these accompanying drawings Accompanying drawing, and obtain other embodiments.
It is illustrated in figure 1 the wireless MAC sniff scan method schematic flow sheet of present invention offer, specifically this wireless MAC is smelt Visit scan method and be applied to radio reception device, it can be seen that including in this wireless MAC sniff scan method:S1 The probe data packet (probe req bag) that crawl terminal sends;S2 radio reception device kernel enters traps;S3 will detect number Put into relief area according to bag and enter row cache, and generate probe data packet record;S4 radio reception device kernel terminates traps, normally Run;S5 presets kernel thread and is processed from relief area reading probe data packet record.
Specifically, specifically include in step s3, detection count off evidence is put into buffer circle and enters row cache.By buffering Area is the buffer circle of no lock, the traps program run will not be had any impact, effectively carry in radio reception device The high stability of system.In addition, above-mentioned radio reception device includes wireless apss, wireless router etc., here does not limit.
In a specific embodiment, above-mentioned buffer circle be dimensioned to 512 records, every record includes 13 bytes, totally 6656 bytes;Wherein, every 13 each bytes of including of record specifically include:6 bytes of MAC Address, eventually 1 byte of signal intensity (RSSI) at end, 2 bytes of background noise (Noise Floor), (Timestamp connects to receive the time The timestamp in time receiving) 4 bytes.In other embodiments, buffer circle can also be other sizes, is entered according to practical application Row sets, and here does not limit.
As shown in Fig. 2 presetting kernel thread from relief area reading probe data packet record is processed in step S5, tool Body includes:S51 presets kernel thread and reads relief area, obtains probe data packet record;The probe data packet that S52 parsing reads Record, and the probe data packet record of MAC Address repetition is filtered;In the MAC Address based on probe data packet for the S53 changes Core Hash table (KVHLIST);S54 report change after kernel Hash table to user's space.
Specifically, in step S52, probe data packet record is parsed, parse probe data packet in every record MAC Address, also include the background noise of probe data packet and reception time in every record simultaneously, and launch this detection number Signal intensity according to bag terminal.Afterwards, the MAC Address according to probe data packet in every record was carried out to detecting bag record Filter, by MAC Address identical record remove (MAC Address said herein refers specifically to source MAC, MAC Address identical explanation from The probe data packet of same terminal, so effectively prevent reporting of repetition garbage, has saved resource), after being filtered Probe data packet record.Afterwards, the MAC ground in step S53, based on every record in the probe data packet record after filtering Location is changed to kernel Hash table, finally in step S54, the kernel Hash table after change is uploaded to user's space.At this During one, in default kernel thread, filtration treatment is carried out to probe data packet, by the kernel isolation of radio reception device Out, if processing procedure goes wrong, such as collapse etc., also simply default kernel thread goes wrong, and is not result in Kernel Panic, Undoubtedly improve the stability of system.
For further, the process in step S53, kernel Hash table being changed specifically includes:Based on detection number MAC Address according to bag makes a look up in current inner Hash table;If finding identical MAC ground in current inner Hash table Location, then update signal intensity, background noise and the reception time of the association of this MAC Address;If in current inner Hash table not Find identical MAC Address, then by the MAC Address of this probe data packet, signal intensity, background noise and reception time shape The record insertion current inner Hash table of Cheng Xin.After change, pre-set space is full or default report cycle surpasses in kernel Hash table When, after reporting change, kernel Hash table, to user's space, realizes the scanning of wireless MAC sniff.
The structural representation of the wireless MAC sniff scanning means of present invention offer, specifically this wireless MAC are provided Sniff scanning means 100 is applied to radio reception device, it can be seen that in this wireless MAC sniff scanning means 100 Including:Packet handling module 110, kernel traps module 120, cache module 130, kernel traps terminate module 140 with And data processing module 150, wherein, kernel traps module is connected with packet handling module 110, cache module 130 with interior Core traps module 120 connects, and kernel traps are terminated module 140 and are connected with cache module 130, data processing module 150 with Kernel traps terminate module 140 and connect.
In the course of the work, first, capture, using packet handling module 110, the probe data packet that terminal sends, and Kernel traps module 120 is sent a signal to after the probe data packet grabbing;Kernel traps module 120 receives this letter Number afterwards, traps radio reception device kernel immediately, that is, radio reception device kernel enter traps program;Then, will grab The probe data packet got buffers into cache module 130 and generates probe data packet record;And after caching, kernel traps Terminate the traps that module 140 terminates radio reception device kernel;Finally, data processing module 150 reads from relief area and detects Packet data recording is processed.
Specifically, above-mentioned cache module 130 is a buffer circle, the buffer circle being no lock by relief area, no The traps program run in radio reception device can be had any impact, effectively increase the stability of system.Above-mentioned Data processing module 150 is a kernel thread adding in advance, is exclusively used in the probe data packet grabbing is processed.Separately Outward, above-mentioned radio reception device includes wireless apss, wireless router etc., and here does not limit.
In a specific embodiment, above-mentioned buffer circle be dimensioned to 512 records, every record includes 13 bytes, totally 6656 bytes;Wherein, every 13 each bytes of including of record specifically include:6 bytes of MAC Address, eventually 1 byte of signal intensity (RSSI) at end, 2 bytes of background noise (Noise Floor), (Timestamp connects to receive the time The timestamp in time receiving) 4 bytes.In other embodiments, buffer circle can also be other sizes, is entered according to practical application Row sets, and here does not limit.
Furthermore, it is understood that being illustrated in figure 4 a kind of embodiment schematic diagram of above-mentioned data processing module 150, specifically at this In embodiment, specifically include in this data processing module 150:Data-reading unit 151, resolve packet unit 152, number According to packet filtering unit 153, Hash table changing unit 154 and Hash table reporting unit 155, wherein, resolve packet unit 152 It is connected with data-reading unit 151, Packet Filtering unit 153 is connected with resolve packet unit 152, Hash table changing unit 154 are connected with data-reading unit 151, resolve packet unit 152 and Packet Filtering unit 153, on Hash table respectively Declaration form unit 155 is connected with Hash table changing unit 154.
In the course of the work, data-reading unit 151 reads relief area, obtains probe data packet record;Afterwards, packet Resolution unit 152 parses to the probe data packet record reading, and parses the MAC ground of probe data packet in every record Location, also includes the background noise of probe data packet and reception time in every record simultaneously, and launches this probe data packet eventually The signal intensity at end.Afterwards, Packet Filtering unit 153 wraps to detecting according to the MAC Address of probe data packet in every record Record is filtered, and MAC Address identical record is removed, the probe data packet record after being filtered.Then, Hash table becomes More unit 154 is changed to kernel Hash table based on the MAC Address of every record in the probe data packet record after filtering;? Afterwards, after Hash table reporting unit 155 will change, kernel Hash table reports to user's space.In this course, default interior In core thread, filtration treatment is carried out to probe data packet, the kernel of radio reception device is isolated, if processing procedure occurs Problem, such as collapse etc., also simply default kernel thread goes wrong, and is not result in Kernel Panic, undoubtedly improves the steady of system Qualitative energy.
Above-mentioned embodiment is improved, as shown in figure 5, reading except including data in this data processing module 150 Unit 151, resolve packet unit 152, Packet Filtering unit 153, Hash table changing unit 154 and Hash table is taken to report Outside unit 155, also include a MAC Address searching unit 156, its MAC Address based on probe data packet is breathed out in current inner Make a look up in uncommon table.Specifically, if finding identical MAC Address, Hash table changing unit in current inner Hash table 154 signal intensity, background noise and the reception times updating the association of this MAC Address;If not looking in current inner Hash table Find identical MAC Address, then the MAC Address of this probe data packet, signal intensity, background are made an uproar by Hash table changing unit 154 Sound and reception time form new record insertion current inner Hash table.After change, pre-set space is full in kernel Hash table Or default report cycle time-out, after Hash table reporting unit 155 will change, kernel Hash table reports to user's space, realizes wireless MAC sniff scans.
It should be noted that above-described embodiment all can independent assortment as needed.The above is only the preferred of the present invention Embodiment it is noted that for those skilled in the art, in the premise without departing from the principle of the invention Under, some improvements and modifications can also be made, these improvements and modifications also should be regarded as protection scope of the present invention.

Claims (10)

1. a kind of wireless MAC sniff scan method it is characterised in that being applied to radio reception device, sweep by described wireless MAC sniff The method of retouching includes:
S1 captures the probe data packet that terminal sends;
S2 radio reception device kernel enters traps;
Probe data packet is put into relief area and is entered row cache by S3, and generates probe data packet record;
S4 radio reception device kernel terminates traps, normal operation;
S5 presets kernel thread and is processed from relief area reading probe data packet record.
2. wireless MAC sniff scan method as claimed in claim 1, it is characterised in that specifically including in step s3, will be visited Observe and predict data and put into buffer circle and enter row cache.
3. wireless MAC sniff scan method as claimed in claim 1 or 2 is it is characterised in that specifically include in step s 5:
S51 presets kernel thread and reads relief area, obtains probe data packet record;
The probe data packet record that S52 parsing reads, and the probe data packet record of MAC Address repetition is filtered;
The MAC Address based on probe data packet for the S53 changes kernel Hash table;
S54 report change after kernel Hash table to user's space.
4. wireless MAC sniff scan method as claimed in claim 3 is it is characterised in that in step S52, also parse every The background noise of probe data packet and reception time in bar record, and the signal intensity launching this probe data packet terminal.
5. wireless MAC sniff scan method as claimed in claim 4 is it is characterised in that specifically include in step S53:
MAC Address based on probe data packet makes a look up in current inner Hash table;
If finding identical MAC Address in current inner Hash table, update signal intensity, the back of the body of the association of this MAC Address Scape noise and reception time;
If not finding identical MAC Address in current inner Hash table, by the MAC Address of this probe data packet, signal Intensity, background noise and reception time form new record insertion current inner Hash table.
6. wireless MAC sniff scan method as claimed in claim 3 is it is characterised in that specifically include in step S54:
In kernel Hash table after change, pre-set space is completely or default report cycle is overtime, and after reporting change, kernel Hash table is to use Family space.
7. a kind of wireless MAC sniff scanning means it is characterised in that being applied to radio reception device, sweep by described wireless MAC sniff Imaging apparatus include:
Packet handling module, for capturing the probe data packet of terminal transmission;
Kernel traps module, based in the probe data packet traps radio reception device that packet handling module grabs Core;
Cache module, for after radio reception device kernel traps, the detection that data cached bag handling module detects Packet, and generate probe data packet record;
Kernel traps terminate module, after buffering into cache module in probe data packet, terminate in radio reception device The traps of core;
Data processing module, is processed for reading probe data packet record from relief area.
8. wireless MAC sniff scanning means as claimed in claim 7 is it is characterised in that described cache module is that an annular is slow Rush area.
9. wireless MAC sniff scanning means as claimed in claim 7 or 8 is it is characterised in that data processing module includes:
Data-reading unit, for reading relief area, obtains probe data packet record;
Resolve packet unit, for parsing the probe data packet record reading, obtains the MAC Address of probe data packet;Tool The analysis result of body probe data packet record includes:In every record when the MAC Address of probe data packet, background noise and reception Between, and the signal intensity launching this probe data packet terminal;
Packet Filtering unit, probe data packet MAC Address being repeated based on the MAC Address that resolve packet unit resolves go out Record is filtered;
Hash table changing unit, changes kernel Hash table based on the MAC Address that resolve packet unit resolves go out;
Hash table reporting unit, for reporting to user's space by the kernel Hash table after change.
10. wireless MAC sniff scanning means as claimed in claim 9 is it is characterised in that also include one in data processing module MAC Address searching unit, the MAC Address based on probe data packet makes a look up in current inner Hash table;
If finding identical MAC Address in current inner Hash table, Hash table changing unit updates the association of this MAC Address Signal intensity, background noise and receive the time;
If not finding identical MAC Address in current inner Hash table, Hash table changing unit is by this probe data packet MAC Address, signal intensity, background noise and reception time form new record insertion current inner Hash table.
CN201610802925.7A 2016-09-05 2016-09-05 Wireless MAC sniffing scanning method and apparatus Pending CN106413004A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201610802925.7A CN106413004A (en) 2016-09-05 2016-09-05 Wireless MAC sniffing scanning method and apparatus

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201610802925.7A CN106413004A (en) 2016-09-05 2016-09-05 Wireless MAC sniffing scanning method and apparatus

Publications (1)

Publication Number Publication Date
CN106413004A true CN106413004A (en) 2017-02-15

Family

ID=57998698

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201610802925.7A Pending CN106413004A (en) 2016-09-05 2016-09-05 Wireless MAC sniffing scanning method and apparatus

Country Status (1)

Country Link
CN (1) CN106413004A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107682890A (en) * 2017-09-19 2018-02-09 杭州迪普科技股份有限公司 A kind of terminal access controlling method and device
CN109089301A (en) * 2018-07-19 2018-12-25 深圳云盈网络科技有限公司 network data processing system and method
CN109660957A (en) * 2018-12-26 2019-04-19 成都科来软件有限公司 A kind of device and method of WLAN positioning AP

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101035142A (en) * 2006-03-07 2007-09-12 中国科学院声学研究所 Ethernet interface realization method in the built-in system
CN101135980A (en) * 2006-08-29 2008-03-05 飞塔信息科技(北京)有限公司 Device and method for realizing zero copy based on Linux operating system
CN101150487A (en) * 2007-11-15 2008-03-26 曙光信息产业(北京)有限公司 A transmission method for zero copy network packet
CN102026186A (en) * 2009-09-21 2011-04-20 国基电子(上海)有限公司 Service network detection system and method

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101035142A (en) * 2006-03-07 2007-09-12 中国科学院声学研究所 Ethernet interface realization method in the built-in system
CN101135980A (en) * 2006-08-29 2008-03-05 飞塔信息科技(北京)有限公司 Device and method for realizing zero copy based on Linux operating system
CN101150487A (en) * 2007-11-15 2008-03-26 曙光信息产业(北京)有限公司 A transmission method for zero copy network packet
CN102026186A (en) * 2009-09-21 2011-04-20 国基电子(上海)有限公司 Service network detection system and method

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107682890A (en) * 2017-09-19 2018-02-09 杭州迪普科技股份有限公司 A kind of terminal access controlling method and device
CN107682890B (en) * 2017-09-19 2021-02-26 杭州迪普科技股份有限公司 Terminal access control method and device
CN109089301A (en) * 2018-07-19 2018-12-25 深圳云盈网络科技有限公司 network data processing system and method
CN109089301B (en) * 2018-07-19 2021-01-15 深圳云盈网络科技有限公司 Network data processing system and method
CN109660957A (en) * 2018-12-26 2019-04-19 成都科来软件有限公司 A kind of device and method of WLAN positioning AP

Similar Documents

Publication Publication Date Title
CN105577496B (en) The system that a kind of home gateway identifies access device type using cloud platform
US8365287B2 (en) Anti-malware system and operating method thereof
CN102739473B (en) Network detecting method using intelligent network card
CN109976918B (en) Camera resource allocation method, mobile terminal and computer readable storage medium
CN106413004A (en) Wireless MAC sniffing scanning method and apparatus
US20200192457A1 (en) Power-saving processing method and device, mobile terminal and computer-readable storage medium
US20050265270A1 (en) Radio communication system using timeout control with flexible timeout interval setting
KR20060091418A (en) Bitmap-based automatic repeat request engine and method for the same
US8532105B2 (en) Image forming apparatus, and control method and interface apparatus thereof
CN102158882A (en) Two-channel data detection and protocol analysis meter based on 6LowPAN and method
CN103441941A (en) High performance data message capture method and device based on Linux
WO2023273424A1 (en) Loading method and apparatus based on linux kernel ko module
CN106878326A (en) The guard method of IPv6 neighbor caches and its device based on inverse detection
US20150304271A1 (en) Address resolution protocol buffer and buffering method thereof
CN113067810A (en) Network packet capturing method, device, equipment and medium
US20150215333A1 (en) Network filtering apparatus and filtering method
CN109728879B (en) Synchronous error correction method for serial burst access application layer SLIP protocol message
CN101582880B (en) Method and system for filtering messages based on audited object
CN115065691B (en) Communication implementation method and device based on android platform
US20090268728A1 (en) Protocol incompatibility detection
CN109089301B (en) Network data processing system and method
CN1266883C (en) Method for controlling network port flow
CN110175125B (en) Application operation abnormity solving method and device, mobile terminal and storage medium
CN111124948A (en) Network data packet capturing method and system of embedded system and storage medium
WO2024061256A1 (en) Forwarding rule configuration method and apparatus, terminal, and network side device

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20170215

WD01 Invention patent application deemed withdrawn after publication