摘要
传统数据包捕获机制BPF存在的问题有两个,一是数据报文在提交给检测程序处理时,需要两次拷贝,二是数据报文处理过程中出现频繁的中断。采用了双零拷贝技术和半轮询驱动技术克服上述缺点,提出了半轮询双零拷贝数据包捕获机制。通过实验证明,新引入的机制能够较好地提高数据包捕获机制的性能。
There are two shortcomings about Traditional Packet capture module BPF,first one needs two copies when packet is submitteddetecting program,second appears frequent interrupt when deals with packets.Paper introduces technology of double zero copy and semi-polling driven to improve two shortcomings and Packet capture mechanism based on semi-polling driven and double zero copy is introduced.Experiment shows that the newly introduced mechanism can improve performance of packet capture mechanism.
出处
《计算机安全》
2012年第9期55-60,共6页
Network & Computer Security
关键词
捕获机制
零拷贝
半轮询驱动
双零拷贝
Capture Mechanism
Zero Copy
Semi-Polling Driven
Double Zero Copy
