参考文献

[1]张帆，史彩成.Windows驱动开发技术详解[M].北京：电子工业出版社，2008.

[2]Chris Sanders.Practical Packet Analysis:Using Wireshark to Solve Real-World Network Problems[M].No Starch Press.2007.www.nostarch.com.

[3]Angela Orebaugh，Gilbert Ramirez，Jay Beale.Wireshark＆Ethereal Network Protocol Analyzer Toolkit[M].Syngress.2007.www.syngress.com.

[4]WinPcap项目.WinPcap源代码与用户手册[J/OL].2012.http://www.winpcap.org/.

[5]Wireshark项目.Wireshark源代码与用户手册[J/OL].2012.http://www.wireshark.org/.

[6]Loris Degioanni，Mario Baldi，Fulvio Risso，Gianluca Varenni.Profiling and Optimization of Software-Based Network-Analysis Applications[C].Proceedings of the 15th IEEE Symposium on Computer Architecture and High Performance Computing(SBAC-PAD 2003).Sao Paulo.Brazil.2003.

[7]Fulvio Risso，Loris Degioanni.An Architecture for High Performance Network Analysis[C].Proceedings of the 6th IEEE Symposium on Computers and Communications(ISCC 2001).Hammamet.Tunisia.2001.

[8]S McCanne，V Jacobson.The BSD Packet Filter:A New Architecture for User-level Packet Capture[C].Proceedings of the 1993 Winter USENIX Technical Conference.San Diego.CA.1993.

[9]曾鸣，赵荣彩.BPF的实现机制分析与性能优化研究[J].计算机工程，2007（12）：43-45.

[10]吕雪峰，梅天凤.网络测试中海量数据包存储与处理技术的研究[J].计算机应用，2009（S2）：29-31.

说明　在本书的写作中还参考了一部分网络资料，不过由于过于琐碎，没有详细记录来源，在此对相关资料的提供者表示感谢。