摘要
为提升高负载网络下包捕获接口的性能,对包捕获接口在网络流量监测和网络入侵检测等应用中的性能进行了研究。分析了传统包捕获优化方法PACKET_MMAP和PF_RING性能受限的原因,设计了一种用户级的包捕获方法。该方法采用了可扩展的内存映射机制、灵活的拷贝策略和高效的轮询机制,最后在IntelPRO/1000 PT Server Adapter上实现。与传统优化技术相比,该方法简单高效,包捕获速率更高。
To improve the performance of packet capturing interface in high-load network,the performance of the packet capturing component in the network flow monitoring and intrusion detection system is firstly studied.Then the limitation of the traditional methods like PACKET_MMAP and PF_RING is analyzed.A user-level packet capture method（UPC） is designed,which adopts scalable memory-mapped mechanism,flexible copy strategy and efficient polling mechanism.Finally,the approach is implemented on the Intel PRO/1000 PT server adapter.Compared with traditional optimization techniques,it is simple,efficient and has a higher rate.
出处
《计算机工程与设计》
CSCD
北大核心
2010年第10期2203-2205,2265,共4页
Computer Engineering and Design
基金
河南省杰出人才创新基金项目(0521000200)
