基于Netfilter的被动测量方法

A Network Passive Measurement based on the Netfilter

给Linux内核和iptables打补丁,在iptables的过滤表中添加PROMISC规则链。基于这个原理,设计和实现了一种网络被动测量方法,通过和用户层网络测量程序相比较,该方法提高包捕获效率,降低丢包率。

Making patches for linux kernel and iptables adds a PROMISC chain in the filter table. Then Netfilter can see all packets from other hosts when network card works in promiscous mode. This dissertation designs and implements a network passive measurement system based on the Netfilter under linux operating system. The network passive measurement system improves the efficency of the packet capture and reduces the ratio of the packet loss when compared with the general packet capture system built at the user level.