高负载网络下线速包捕获接口的设计与实现  

Wire-speed packet capture interface design and implementation in high-load network

作　　者：笱程成[1] 赵荣彩[1] 邰铭[1] 张铮[1] 南煜[1] 

机构地区：[1]中国人民解放军信息工程大学信息工程学院,河南郑州450002

出　　处：《计算机工程与设计》2010年第10期2203-2205,2265,共4页Computer Engineering and Design

基　　金：河南省杰出人才创新基金项目(0521000200)

摘　　要：为提升高负载网络下包捕获接口的性能,对包捕获接口在网络流量监测和网络入侵检测等应用中的性能进行了研究。分析了传统包捕获优化方法PACKET_MMAP和PF_RING性能受限的原因,设计了一种用户级的包捕获方法。该方法采用了可扩展的内存映射机制、灵活的拷贝策略和高效的轮询机制,最后在IntelPRO/1000 PT Server Adapter上实现。与传统优化技术相比,该方法简单高效,包捕获速率更高。To improve the performance of packet capturing interface in high-load network,the performance of the packet capturing component in the network flow monitoring and intrusion detection system is firstly studied.Then the limitation of the traditional methods like PACKET_MMAP and PF_RING is analyzed.A user-level packet capture method（UPC） is designed,which adopts scalable memory-mapped mechanism,flexible copy strategy and efficient polling mechanism.Finally,the approach is implemented on the Intel PRO/1000 PT server adapter.Compared with traditional optimization techniques,it is simple,efficient and has a higher rate.

关 键 词：高负载 零拷贝 轮询机制 直接内存访问缓存 内存映射 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]