千兆位入侵检测系统中的零拷贝码流采集技术

High performance network stream capture technology on gigabits IDS

千兆位入侵检测是当前网络安全领域的一个研究热点,而其中网络信息流的采集又是整个IDS系统的重要组成部分,针对一个千兆位入侵检测系统的实例,讨论了基于BPF机制的数据包截获机制,并进一步提高利用零拷贝技术实现的性能优化.

Gigabits Intrusion Detection System is a research hotpot in the area of network security,and the capture technology of network stream,a method of how to capture network stream is discussed detailed and A ZERO COPY technology was implement.