基于大流量小数据包网络环境下的捕包技术研究

Research on Technique of Data Packets Capture Based on Small and High Speed Packets under Network Environment

分析了高速网络环境下PC+NIC架构在Linux系统下数据包捕获机制,讨论了在大流量小数据包网络环境下产生大量丢包的原因,研究了在Linux平台下,通过综合应用地址映射、“零拷贝”、NAPI机制等多种技术对数据包捕获引擎进行改进,搭建了相应的实验平台并进行相关的性能比较测试。测试表明,改进后的捕包平台能较大幅度提高大流量小数据包网络环境下数据包捕获效率。

This paper gives an analysis of the mechanism of data packets capture by using PC＋ NIC hardware architecture and Linux-based system under high speed network environment. And it discusses the cause of the poor performance of packet capture under the network environment of small and high-speed packets. An approach by combining with technology such as memory mapping,＂zero copy＂ ,NAPI is proposed to improve the engine of data packets capture. Experiment platform is set up to test the performance, Experiments show that the author＇s proposal can obviously improve the efficiency of packet capture under small and high-speed packets network environment .