基于Linux下的IP包捕获及解析  

Trapping and analyzing of IP packet based on Linux

作　　者：胡雅娟[1] 韩臻[1] 刘吉强[1] 

机构地区：[1]北京交通大学信息安全体系结构研究中心,北京100044

出　　处：《铁路计算机应用》2004年第2期32-35,共4页Railway Computer Application

基　　金：国家973项目(G1999035801);国家863项目(2002AA144020);北京交通大学科研基金重点资助项目(JSJ01001)

摘　　要：IP包捕获及打包是安全日志服务器的信息采集模块,IP包捕获模块采用Libpcap库实现,引入安全信号机制加强程序的健壮性。考虑到捕获模块与打包模块之间多个线程的协同操作,通过信号量来实现对缓冲池的互斥读写操作。以Linux为平台,对TCP/IP协议下的IP包捕获和打包从原理到模块都做了比较详尽的说明。The modules of trapping and packing IP packet belong to the module of gathering the information based onsecurity log server. The module of trapping IP packet adopted Libpcap to implement and introduced safe signal mechanismto strengthen the procedure more strong. Considering the cooperation of threads between the module of trapping IP packetand the module of packing IP packet, the mutual exclusion of the buffer was employed by signal lamp. It was expounded uponthe trap and pack of IP packet within TCP/IP protocol based on Linux platform.

关 键 词：IP包 信息采集模块 流机制 信号 LIBPCAP库 LINUX 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]