基于TCP/IP协议的网络入侵检测系统是在Linux平台下，充分利用Linux的网络特性来设计的网络安全防御系统的一部分。在完全理解TCP/IP通讯协议的基础上来开发基于网络的入侵检测系统，它主要包括以下几个部分：数据包拦截器，数据包分析器，数据包生成器，远程通讯控制模块，集中管理模块等。 关键字：入侵检测系统，网络安全，协议分析，网络入侵检测系统- Based on the TCP/IP agreement network invasion examination
system is under the Linux platform, fully a network security defense
system part which designs using the Linux network characteristic.
Completely was understanding the TCP/IP communication agreement the
foundation comes up the development based on the network invasion
examination system, it mainly includes following several parts: Data
packet interceptor, data packet analyzer, data packet production,
long-distance communication control module, centralized management
module and so on. Essential character: Invasion examination system,
network security, protocol analysis, network invasion examination
system