包过滤系统中关键字过滤的实现及其性能分析  

Implementation of the keyword filter in the packet filter system and catability analysis

作　　者：夏亮[1] 郑万波[1] 王智[1] 

机构地区：[1]吉林大学计算机科学与技术学院,吉林长春130012

出　　处：《吉林大学学报（信息科学版）》2003年第2期167-171,共5页Journal of Jilin University（Information Science Edition）

基　　金：吉林大学青年教师基金资助项目(2001-055)

摘　　要：一般的包过滤系统仅对IP(InternetProtocol)地址、端口类型等项目进行过滤。笔者提出了对数据包中的数据按照关键字进行过滤的方法,并基于KMP(Kunth-Morris-Pratt)关键字匹配算法,对该系统进行了相应的性能测试。在测试环境下,得出网络吞吐量为75%,1000字节长的数据帧的平均过滤时延约为100μs等一系列测试数据。通过对过滤时延的分析及网络吞吐量的测试结果表明,该方案所设计的系统性能基本能够满足实际要求。Common packet filter system can only filt er the project based on the IP address and port type, a method to filter aimed a t the data in data packet according to the key word is presented.On the bas is of the key word KMP(Kunth-Morris-Pratt) arithmetic, tests the function of the system accordingly ,thus gets a series of testing data as throughput is 75% and average filtrate d elay is about 100 μs for frame of 1 000 bytes in testing environment .Through t he analysis of the filter delay and the network throughput, presents that the syst em performance designed by this scheme can meet the performance needs of practic al use.

关 键 词：防火墙 包过滤 关键字匹配算法 过滤时延 吞吐量 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]