高效报文捕获引擎FPC的研究与实现

Research and Implementation of an Efficient Capture Engine FPC

网络监测在现代基于IP的网络中具有越来越重要的作用。随着网络速度的增加,作为网络监测关键部分的报文捕获引擎暴露出了在性能上的不足。FPC是一个Linux下基于内核的高效报文捕获引擎,使用它可以有效提高网络监测等应用的性能。本文首先在硬件层次和软件层次上分析了报文捕获过程中可能的性能瓶颈,然后介绍了FPC的整体结构和实现的关键技术。测试和应用表明,FPC具有良好的性能。

Network monitoring becomes more and more important in a modern IP-based network infrastructure. The increasing link speed highlights the inefficiencies of the existing packet capturing engine, which is the critical part of network monitoring. FPC is a high-performance packet capture engine based on the Linux kernel. FPC can effectively improve the performance of network monitoring applications. In this paper the possible bottlenecks in the hardware and software layers are analyzcd first. Then FPC＇s overall structure and the key techniques of implementation are presented. Test and applications show that FPC has high performance.