warriors of the net——一段介绍网络工作原理的电影

主要演员：

TCP Packet、ICMP Ping Packet、UDP Packet、The Router、Ping of Death、The

Router Switch、Supported by a cast of millions.

TCP数据包、网际控制报文协议ping数据包、UDP数据包、路由器、死亡之ping、带路由功能的交换机（也就是三层交换机）、以及数百万的群众演员。

For the first time in history people and machinery are working

together, realizing a dream. A uniting force that knows no

geographical boundaries. Without regard to race, creed or color. A new

era where communication truly brings people together. (01:04~01:24)

历史上人与机械的首次合作，实现了一个梦想。一种无疆域限制的力量正在凝聚。它（这种力量）与种族、信条和肤色无关。一个新的交流时代把人们真正的联系在了一起。

This is ? the Dawn of The Net. (01:25~01:31)

这就是? 互联网的拂晓。

Want to know how it works? Click here to begin your journey into the

Net. (01:32~01:39)

想知道它是怎么工作的吗？点击这里开始你的网络之旅。

Now exactly what happened when you clicked on that link? You started a

flow of information. This information travels down to your own

personal mail-room where Mr. IP packages it, labels it and sends it on

its way. Each packet is limited in its size. The mail-room must decide

how to divide the information and how to package it. (01:40~02:03)

当你点击那个链接之后，会怎么样呢？你会开启一个信息的流程。这个信息会首先发送至你的个人邮递空间，由IP先生封装它，给他贴上标签然后将它发送到流水线上。每个数据包都有大小限制。邮递空间负责拆分并封装信息。

The IP packet now needs a label, containing important information such

as senders address, receivers address and the type of packet it is.

Because this particular packet is going out onto the Internet, it also

gets an address for the Proxy Server which has a special function as

we'll see later. (02:04~02:37)

IP数据包需要一个包含重要信息的标签，如：发送者地址、接受者地址以及数据包类型。由于这个特定的数据包要发送至互联网，因此他还需具备代理服务器的地址，稍后我们会看到代理服务器的特殊功能。（当前这片文档讲解的是利用代理服务器访问Internet）

The packet is now launched onto your Local Area Network or LAN. This

network is used to connect all the local computers, routers, printers

etc. for information exchange within the physical walls of the

building. The LAN is a pretty uncontrolled place and unfortunately

accidents can happen. (02:38~02:59)

现在，数据包发送到了局域网中。这个网络用于连接所有的本地计算机、路由器和打印机等设备，以便在不同的建筑物之间实现信息交换。局域网是一个相当难控制的地方，不幸的是，事故时有发生。

The highway of the LAN is packed with all types of information. There

are IP packets, Novell packets, Apple Talk packets - Uh, they're going

against traffic as usual. The local router reads the address and if

necessary lifts the packet onto another network. (03:00~03:24)

局域网的“高速路”上塞满了各种类型的信息。有IP数据包、Novell数据包，Apple Talk数据包，这里也时而会发生拥堵现象。本地路由器读取信息的地址，如果有必要的话，就将信息转发到另一个网络。

Ah the router，a symbol of control in a seemingly disorganized world.

There he is?systematic, uncaring, methodical, conservative and

sometimes not quite up to speed. But he is exact... for the most part.

(03:25~03:55)

路由器，是表面上看起来杂乱无章的世界里的控制的象征。在那里，它是系统的、不予关心的、有条不紊的、谨慎的，有时完全跟不上速度。但是绝大多数时候，它是非常准确的。

As the packets leave the router, they make their way into the

corporate intranet and head for the router switch. A bit more

efficient than the router, the router switch plays fast and loose with

IP packets deftly routing them along their way. A digital pin-ball

wizard if you will. (04:07~04:43)

数据包离开路由器后，它们就进入了企业内联网，并转发向交换机。比路由器的效率高一些，交换机轻松高速的处理IP数据包，熟练的将它们按照其原来的路径路由出去。如果你想的话，你可以把它成为弹球高手。

As packets arrive at their destination they are picked up by the

network interface, ready to be sent to the next level. In this case,

the proxy. The proxy is used by many companies as a sort of

"middleman" in order to lessen the load on their Internet connection.

And for security reasons as well. We can see that the packet are all

of various sizes, depending on their content. (04:44~05:17)

当数据包到达目的地后，会被网络接口说接收，准备发送到下一个阶段。在这种情况下，代理服务器就该出场了。代理服务器像个“中间人”一样，被许多公司所采用，目的是为了降低网络连接的负荷。当然也有安全因素。我们可以看到根据数据包的内容，其大小也是不同的。

The proxy opens the packet and looks for the WEB address or URL.

Depending upon whether the address is acceptable?the packet is sent on

to the Internet. There are, however, some addresses which do not meet

with the approval of the proxy (that is to say corporate or management

guidelines). These are summarily dealt with. We'll have none of that.

For those who make it, it's on the road again.(05:30~06:14)

代理服务器打开数据包并且浏览Web地址或URL（统一资源定位器）。根据地址是否可接受? 数据包被发往互联网。然后，有一些地址没有得到代理服务器的许可（也就是说企业或管理方针）。这些数据包会立刻被处理掉。我们不存在那样的情况，所以我们又回到了原来的路上。

Next up - the Fire Wall. The corporate Fire Wall serves two purposes.

It prevents some rather nasty things from the Internet from coming

into the intranet. And it also can prevent sensitive corporate

information from being sent out to the Internet. (06:20~06:44)

接下来是防火墙。企业防火墙提供了两种服务。一是阻止互联网中的不良信息进入内联网。二是防止敏感的企业信息泄漏到互联网中。

Once through the fire wall, a router picks up the packet and places it

on to a much narrower road or band-width, as we say. Obviously, the

road is not broad enough to take them all. (06:47~06:59)

通过防火墙后，路由器会拾取数据包，并将它们转发到更窄的路上，或者就是我们说的带宽。很明显，那条路不够宽，不足以容纳下所有的数据包。

Now you might wonder what happens to all those packets which don't

make it along the way. Well, when Mr. IP doesn't receive an

acknowledgment that a packet has been received in due time, he simply

sends a replacement packet. (07:00~07:14)

现在你或许想知道那些没有上路的数据包怎么了。当IP先生没有及时收到数据包被接收的回应时，他就会发送替代数据包。

We are now ready to enter the world of the Internet. A spider web of

inter-connected networks which spans our entire globe. Here, routers

and switches establish links between networks. (07:15~07:32)

现在，我们准备进入互联网的世界。相互连接的网络形成的“蜘蛛网”覆盖了全球。在这里，路由器和交换机负责在网间建立连接。

Now, the Net is an entirely different environment than you'll find

within the protected walls of your LAN. Out here, it's the Wild West.

Plenty of space, plenty of opportunities, plenty of things to explore

and places to go. Thanks to very little control and regulation new

ideas find fertile soil to push the envelope of their possibilities.

But because of this freedom, certain dangers also lurk. You'll never

know when you'll meet the dreaded Ping Of Death. A special version of

a normal request Ping which some idiot thought up to mess up

unsuspecting hosts. (07:33~08:12)

和受防火墙保护的局域网相比，现在的网络是完全不同的环境。在这之外，都是待开发的（直译：未开发前的美国西部）。充足的空间、大量的机会、许多的事物等待去开发，也许多地方可以去。多亏了这里控制和规则比较少，新思想才找到发展的沃土。但是也由于这里的自由，某些危险也隐藏于此。你都不知道什么就会遇到恐怖的死亡之ping。它是普通ping请求的特殊版本，一些蠢材认为它能搞糟那些可信主机。

The paths our packets take maybe via satellite, telephone lines,

wireless or even trans-oceanic cable. They don't always take the

fastest or shortest routes possible, but they probably will get there

- eventually. Maybe that's why it's sometimes known as the World Wide Wait. But when everything is working smoothly, you can circumvent the

globe 5 times over, at the drop of a hat - literally. And all for the

cost of a local call or less. (08:13~08:45)

我们的数据包可能会经过人造卫星、电话线、无线或者是海底电缆。它们不总是选择最快或者是最短的路由，但是最终它们都会达到。或许，这就是为什么我们有时会说全球大等待。但是，当一切都能平稳的工作时，你能瞬时环绕地球5次。并且所有的花费也就是一个市话的费用，或者更少。

Near the end of our destination, we'll find another Fire Wall.

Depending upon your perspective as a data packet, the fire wall can be

a bastion of security or a dreaded adversary. It all depends on which

side your on and what your intentions are. (08:46~09:05)

接近我们的目的地后，我们会发现另一个防火墙。从数据包的角度讲，这个防火墙可能是一个安全的堡垒，也可能是一个恐怖的对手。这完全依赖于你要去哪边，你的意图是什么。

The Fire Wall is designed to let in only those packets that meet its

criteria. This wall is operating on ports 80 and 25. All attempts to

enter through other ports are closed for business. (09:06~09:21)

防火墙配置成只允许那些满足其标准（规则）的数据包通过。这个防火墙只开放了80端口和25端口。所有企图从其他端口进入都是禁止的。

Port 25 is used for mail packets, while port 80 is the entrance for

packets from the Internet to the Web server. (09:34~09:45)

25端口用于邮件数据包，而80端口是互联网到Web服务器的数据包的入口。

Inside the fire wall, packets are screened more thoroughly, some

packets make easily through "customs" while others look just a bit

dubious. The Fire Wall officer is not easily fooled, such as when this

ping of death packet tried to disguise itself as a "normal" ping

packet.(09:46~10:09)

在防火墙内部，数据包都是经过十分彻底地筛选的。一些数据包轻而易举的通过“关口”，而一些看起来就有点可疑了。防火墙可不是那么好愚弄的，就像死亡之ping试图把自己伪装成一个正常的ping数据包。（这里面没有提到结果，可是视频中它们都不kill掉了。）

For those packets lucky enough to make this far, the journey is almost

over. It's just to line up on the interface to be taken up into the

web server. (10:11~10:29)

对于那些足够幸运可能走这么远的数据包来讲，它们的旅途也基本结束了。它们在接口排好队，然后进入网络服务器。

Nowadays, a web server can run on many things. From a mainframe, to a

web-cam to the computer on your desk. Or why not your refrigerator?

With the proper set-up, you can find out if you the makings for

Chicken Catchitory or if you have to go shopping. Remember this is the

Dawn of the Net - almost anything's possible. (10:30~10:50)

如今，网络服务器可以做很多事情。从大型机到桌面上的计算机。或者，为什么不是电冰箱呢？只要适当的设置，你会发现你可以用它来做菜（好多地方都说是菜名：Chicken Catchitory）或者购物。记住这是互联网的拂晓，几乎任何事情都有可能。（你也可以套用广告词：“一切皆有可能！”）

One by one, the packets are received, opened and unpacked. The

information they contained, that is your request for information is

sent onto the Web server application. The packet itself is recycled.

Ready to be used again. And filled with your requested information.

Addressed and sent out on its way back to you. (10:51~11:38)

一个接一个的数据包被接收到，打开，解封装。它们所包含的信息，也就是你的请求信息，被发送到Web服务器应用程序。这个包裹会被回收。准备再次使用。装满你所请求的信息的包裹，标上地址并回传给你。

Back past the fire walls, routers, and on through the Internet. Back

through your corporate fire wall and onto your interface.

(11:39~12:00)

经过来时的防火墙，路由器，通过互联网。通过企业内联网到达你的接口。

Ready to supply your web browser with the information you requested.

(12:01~12:05)

将你请求的信息发送给web浏览器。

That is - this film. (12:06~12:10)

这就是-这个电影。

Pleased with their efforts and trusting in a better world, our trusty

data packets ride off blissfully into the sunset of another day,

knowing fully they have served their masters well. (12:11~12:32)

为它们（此处指“数据包”）的努力而高兴、相信世界会更好，我们所信赖的数据包幸福的驶向又一天的日落，充分认识到它们已经很好的为您服务了。

Now isn't that a happy ending? (12:33~12:38)

这不是一个很快乐的结束吗？

视频观看地址：http://v.ku6.com/show/i5pYntydQbDrkcGsjRfSvQ...html