(The firewall system at the network gap can effectively protect some attacks from the external network. Under the real-time protection of the intrusion/intrusion detection system, it can theoretically ensure the security of the internal network. However, the illegal/illegal operation of the internal network is more shadowy and more threatening. In this situation, real-time traffic monitoring and data packet analysis are performed on the intranet through sniffing technology, which better strengthens and guarantees the security of the intranet.
Research on internal network security based on sniffing technology.pdf)