一种零拷贝报文捕获技术及其性能分析

A zero copy Packet Capture technique and its performance analysis

零拷贝技术是提高通用计算机报文采集性能的重要技术手段,但是目前通用的方案存在不易移植的缺点。本文提出一种新型零拷贝报文捕获技术PF_DMA,通过对系统内核函数的扩展、替换,在不破坏原有网卡驱动程序结构的基础上实现报文的零拷贝捕获。对其性能测试结果表明,在千兆线速情况下,64字节小包报文捕获能力可达1.17Mpps。

Zero-Copy technique has been widely used in the implementation of packed-capture algorithm.However,existing implementations needs too much modifications of NIC device drivers,and can not be migrated between heterogeneous NICs.We propose a new implementation of Zero-Copy technique（PF_DMA） in this paper.PF_DMA implements mainly in the core functions of the operating system,and avoids damaging of NIC drivers.Experimental results show that the throughputs of PF_DMA are 1.17Mbpps for 64 Byte messages.