基于VxWorks的IP层数据包监听技术研究

Research on Network Sniffing Data Packets of the IP Layer in VxWorks

近年来针对VxWorks操作系统的安全漏洞展开的非法网络攻击事件频现,数据包监听技术是网络攻击检测的重要手段之一,与此同时,数据包监听技术也是网络数据记录、存储以及网络通信调试的关键技术手段,但针对VxWorks操作系统的数据包监听技术研究较少,因此论文对VxWorks操作系统下的IP层数据包监听技术进行研究,并分别基于VxWorks网络协议栈的MUX(Multiplexer)接口、伯克利封包过滤器(Berkeley Packet Filter,BPF)、原始套接字(raw socket)三种技术的以太网IP数据包捕获技术,给出了三种技术工程实现的关键步骤和技术方法,分别实现了VxWorks下的IP数据包的监听和捕获,并在文中设计了试验进行给出方法的功能性能验证,试验结果表明,三种方法都能够实现VxWorks下网络数据监听功能,MUX方法的丢包率是最低的,而原始套接字的方式使用最为简便和通用。

In recent years,illegal network attacks against the security vulnerabilities of VxWorks operating system occur frequently.Packet monitoring technology is one of the important means of network attack detection.At the same time,packet monitoring technology is also the key technical means of network data recording,storage and network communication debugging.However,there is barely research on packet monitoring technology for VxWorks operating system.Therefore,this paper studies the IP layer packet monitoring technology under VxWorks operating system,and Ethernet IP packet capture technology based on MUX(multiplexer)interface of VxWorks network protocol stack,Berkeley packet filter(BPF)and raw socket.The key steps and technical methods of three technical engineering implementation are given,and the monitoring and capture of IP packets under VxWorks are realized respectively.In this paper,experiments are designed to verify the functional performance of the given methods.The experimental results show that the three methods can realize the network data monitoring function under VxWorks,and the packet loss rate of MUX method is the lowest.The raw socket is the most convenient and universal way to use.