基于BPF和LIBPCAP库的包捕获应用系统的设计

The Implementation of Packet Capture Application Systems based on BPF and libpcap

包捕获和包分析是网络管理中使用的基本技术。它可用于网络测试、重构端到端的会话及监测网络运行状况等。本文分析了多种包捕获机制．着重探讨了BPF技术，介绍了一个用于用户层包捕获的系统独立的API接口Libpcap库，给出了利用BPF和Libpcap设计基于包捕获的应用程序的应用框架。

Packet capture and packte analysis is one of the basic technologies used in network managment. It is uti-lized in network testing. reconstructing end-to-end sessions and monitoring the status of network. This paper analyzed somepacket capture mechanisms with emphasis on BPF technique. It then introduced libpcap library - a system-independent in-terface for user-level packet capture and descrital the general modle of packet capture applications based on BPF and libp-cap.