实时TCP报文还原中的内存管理  

Memory Management in Recovering of Real-time TCP Message

作　　者：邓月华[1] 刘嘉勇[1] 胡天麟[1] 

机构地区：[1]四川大学电子信息学院,四川成都610054

出　　处：《兵工自动化》2006年第3期50-51,共2页Ordnance Industry Automation

摘　　要：基于宽带网络嗅探的实时TCP报文还原处理IP包缓存和TCP连接相关信息维护的内存管理。其工作流程为:捕获MAC帧、检查TCP连接、缓存IP包、连接结束或超时拆除TCP连接、IP包空间释放。内存管理在每个IP包头加上固定字节的包信息。存储包时同时存储包信息及下一个IP包位置信息,且只需维护第一个包位置、当前包位置以及连接维持时间等信息即可。The recovering of real-time TCP message based on wide-band networks sniffer deals with memory management for buffer memory of IP packets and TCP connection maintenance. Its work process includes： capturing MAC frame, checking TCP connection, temporarily storing IP packets, unchaining TCP connection when connection finished or overtime, and releasing the memory used by IP packets. A fix position is placed at the head of every IP packet in memory management. When a packet is saved, its message and the position of the next IP packet are saved too. Furthermore, the maintenance work can be only concentrated on the position of the first packet and current packet and the length of connection maintenance.

关 键 词：TCP报文 内存管理 IP包缓存 TCP连接 宽带网络嗅探 

分 类 号：TP393.03[自动化与计算机技术—计算机应用技术]