Linux平台下基于软防火墙的流量监测功能实现

The Implementation of Traffic Monitoring Based on Soft Firewall in Linux

初步探讨了Ｌｉｎｕｘ平台下软防火墙的概念与实现机制，提出了一种利用软防火墙实现流量监测的思路，并且对Ｌｉｎｕｘ内核开发中遇到的如何实现内核进程与用户进程的信息交互问题进行了一定的探索，成功地将内核防火墙Ｍｏｄｕｌｅ采集到的数据利用不同方法传送到了用户进程空间。

This essay redimentarily explores the definition and implementation mechanisms of soft firewall under Linux platform. and it also points out one viable approach that car easily accommodate the capability of traffic monitoring with the use of soft firewall module. We have done some with in effectively implementing the mutual information interactions between the kernel module and user process, thus resolving the problem of transferring data between kernel space and user space.