两种数据包捕获架构的分析与比较  

A COMPARISON BETWEEN TWO PACKET CAPTURE ARCHITECTURES

作　　者：庄春兴[1] 刘渊[1] 

机构地区：[1]江南大学信息工程学院,无锡214000

出　　处：《计算机应用与软件》2002年第10期63-64,共2页Computer Applications and Software

摘　　要：BPF与NPF是分别工作在Unix和Windows操作系统中的目前最为流行的数据包捕获架构,它们可用来生成各种网络分析及管理软件。本文介绍了包捕获架构的工作原理,分析了两者在结构和功能上的相似及不同之处,指出了各自在捕获性能上的优缺点。BPF and NPF are two kinds of packet capture architecture in Unix or Windows, being in most common use. They can be used to design various network analyses and softwares for use in management. This paper presents the principle and the component parts of the packet capture. A comparison about the similarity and also the difference in architecture and function between the two architectures is made. Also the advantages and shortages of each architecture are analysed.

关 键 词：数据包捕获架构 分析 UNIX WINDOWS 操作系统 BPF NPF 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]