网络数据采集技术研究  

Research on Network Data Capturing

作　　者：石飞[1] 史岚[1] 乔建忠[1] 莫晓静[1] 

机构地区：[1]东北大学信息科学与工程学院计算机系统研究所,辽宁沈阳110004

出　　处：《小型微型计算机系统》2008年第10期1912-1915,共4页Journal of Chinese Computer Systems

基　　金：国家"八六三"高技术研究发展计划项目(2006AA09Z139)资助

摘　　要：随着网络带宽的不断增长,网络安全系统(如网络入侵检测系统——NIDS)对网络数据包捕获能力要求越来越高,为了提高网络数据包的捕获能力以适应当今高速网络环境,本文在分析传统网络数据采集系统的基础上,采用地址映射、零拷贝捕包和零拷贝存储等技术,提出一种新的捕包系统,该系统的性能较传统的方法有了大幅的提高,在千兆网络环境下,能够满足网络安全对网络数据包捕获能力的需求.With the fast progress of Internet broadband, the capacity of network data capturing is becoming more and more important to network security systems, such as Network Intrusion Detection System, NIDS for short. In order to improve the capacity of network data capturing and make it adapt to the high-speed network, after analyzing traditional network data capturing systems, this paper proposes a new one which is using address mapping, zero-copy capturing and zero-copy storing. The performance of this system is much better than the other traditional systems. It can be competent for the high-speed network.

关 键 词：网络安全 LIBPCAP 零拷贝 双零拷贝 裸设备 地址映射 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]