基于Linux的高性能网络数据捕获技术研究

Research and implementaion of high-performance network packet capture based on Linux

以Linux操作系统中BPF数据包捕获机制为研究对象,着重分析了高速网络环境下数据拷贝、频繁硬件中断对数据包捕获性能的影响.结合"零拷贝"思想,提出一种使用带缓存的内核协议簇PF_RING机制,详细介绍了PF_RING在Linux核心下的实现.仿真实验验证了该方法的可行性.

This paper studies Linux operating system to BPF packet capture mechanism, analyzes, under high-speed network environment, the data copy, impact of frequent hardware interruption on data packet capture performance. Based on zero-copy thinking, an agreement with cluster cache PF_RING kernel mechanism is proposed, and how to implement the PF_RING in Linux is descrebed. The simulation results verify the feasibility of the method.