摘要
一般的包过滤系统仅对IP(InternetProtocol)地址、端口类型等项目进行过滤。笔者提出了对数据包中的数据按照关键字进行过滤的方法,并基于KMP(Kunth-Morris-Pratt)关键字匹配算法,对该系统进行了相应的性能测试。在测试环境下,得出网络吞吐量为75%,1000字节长的数据帧的平均过滤时延约为100μs等一系列测试数据。通过对过滤时延的分析及网络吞吐量的测试结果表明,该方案所设计的系统性能基本能够满足实际要求。
Common packet filter system can only filt er the project based on the IP address and port type, a method to filter aimed a t the data in data packet according to the key word is presented.On the bas is of the key word KMP(Kunth-Morris-Pratt) arithmetic, tests the function of the system accordingly ,thus gets a series of testing data as throughput is 75% and average filtrate d elay is about 100 μs for frame of 1 000 bytes in testing environment .Through t he analysis of the filter delay and the network throughput, presents that the syst em performance designed by this scheme can meet the performance needs of practic al use.
出处
《吉林大学学报（信息科学版）》
CAS
2003年第2期167-171,共5页
Journal of Jilin University（Information Science Edition）
基金
吉林大学青年教师基金资助项目(2001-055)
关键词
防火墙
包过滤
关键字匹配算法
过滤时延
吞吐量
Firewall
Packet filter
Keyword-method-arit hmetic
Filter delay
Throughput
