基于Netfilter的被动测量方法  

A Network Passive Measurement based on the Netfilter

作　　者：李霞丽[1] 魏恒义[1] 曾明[1] 温辉敏[1] 

机构地区：[1]西安交通大学计算机科学与技术系,陕西西安710049

出　　处：《微电子学与计算机》2004年第6期138-140,144,共4页Microelectronics & Computer

基　　金：国家十五863项目(2001AA112111)资助。

摘　　要：给Linux内核和iptables打补丁,在iptables的过滤表中添加PROMISC规则链。基于这个原理,设计和实现了一种网络被动测量方法,通过和用户层网络测量程序相比较,该方法提高包捕获效率,降低丢包率。Making patches for linux kernel and iptables adds a PROMISC chain in the filter table. Then Netfilter can see all packets from other hosts when network card works in promiscous mode. This dissertation designs and implements a network passive measurement system based on the Netfilter under linux operating system. The network passive measurement system improves the efficency of the packet capture and reduces the ratio of the packet loss when compared with the general packet capture system built at the user level.

关 键 词：PROMISC 网络被动测量 包捕获 丢包率 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]