ARM平台下Netfilter日志管理技术研究  

Research on Log Management Technology of Netfilter Based on ARM Platform

作　　者：刘文 赵晓东[2] 王伟[2] 徐磊[2] 肖松海 

机构地区：[1]新疆机电职业技术学院电气工程系,新疆乌鲁木齐830011 [2]新疆农业大学科学技术学院,新疆乌鲁木齐830091

出　　处：《计算机技术与发展》2011年第9期250-252,F0003,共4页Computer Technology and Development

基　　金：新疆维吾尔自治区高校科研计划资助(XJEDU2010S48)

摘　　要：市面上中小型防火墙设备的日志管理功能极为有限。为了提高行为记录的效率及功能,设计防火墙软硬件平台,提出基于ARM平台下的Netfilter日志管理技术方案和通信日志收集、发送的流程逻辑思路;调用Linux内核ipt_ULOG模块获取Netfilter数据包处理日志并记录于嵌入式数据库;提出了日志管理的关键函数和嵌入式数据库的设计方法,利用脚本程序处理数据库日志信息并实现远程管理。测试表明:该方案能高效、全面地实现对互联网访问行为的管理;设计方案及研究结果为嵌入式防火墙的行为记录提供了依据。Small and medium firewall device of the log management function was extremely limited.In order to improve the efficiency and function of behavior records,firewall hardware and software platform were designed.Proposed the logical process of Netfilter log management solution and communication log collecting and sending based on arm platform;Called the ipt_ULOG module of Linux kernel to get the log of Netfilter processing data packets and recorded in the embedded database,proposed the design method of the critical functions of the log management and the embedded database,handled database log information and achieved remote management by script.Tests show： the program could achieve the behavior management of internet access effective and comprehensive.And this results provide a basis for embedded firewall behavior management and the future.

关 键 词：嵌入式防火墙 Netfilter日志 ipt_ULOG模块 行为记录 ARMS3C2440 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]