网络流量采集与分析系统的实现  

Implement of network traffic collection and analysis system

作　　者：龙恒[1] 张劲勇[1] 吴红梅[1] Long Heng;Zhang Jinyong;Wu Hongmei(Maoming Polytechnic,Maoming,Guangdong 525000,China)

机构地区：[1]茂名职业技术学院,广东茂名525000

出　　处：《计算机时代》2022年第4期24-28,共5页Computer Era

摘　　要：在使用基于网络的应用或服务的过程中会遇到各种问题,需要使用流量分析工具找出原因才能解决问题。文章阐述了一套流量采集及分析系统的实现过程,重点讲解了数据包的捕获技术及分析方法、后台进程的结构,以及线程之间的交互过程、采用双缓冲区方案实现线程同步以避免出现资源竞争、使用内存预分配技术来提高内存缓冲区数据结构的性能等方面的内容。该系统已实际运行一年多,可以解决网络应用中的常见问题,具有较强的实用性。In the process of using network-based applications or services,various problems are encountered,and it is necessary to use traffic analysis tools to find out the reasons and solve these problems.In this paper,the realization process of a set of flow collection and analysis system is expounded.It focuses on the capture technology and analysis method of data packets,the structure of the background process,and the interaction process between threads.The double buffer scheme is used to achieve thread synchronization to avoid resource contention.The memory pre-allocation technique is used to improve the performance of the memory buffer data structure.The system has been in practical use for more than a year.It can solve common problems in network applications,and has strong practicability.

关 键 词：数据包捕获 数据包分析 Npcap 线程同步 内存预分配 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]