基于Linux下的IP包捕获及解析

Trapping and analyzing of IP packet based on Linux

IP包捕获及打包是安全日志服务器的信息采集模块,IP包捕获模块采用Libpcap库实现,引入安全信号机制加强程序的健壮性。考虑到捕获模块与打包模块之间多个线程的协同操作,通过信号量来实现对缓冲池的互斥读写操作。以Linux为平台,对TCP/IP协议下的IP包捕获和打包从原理到模块都做了比较详尽的说明。

The modules of trapping and packing IP packet belong to the module of gathering the information based onsecurity log server. The module of trapping IP packet adopted Libpcap to implement and introduced safe signal mechanismto strengthen the procedure more strong. Considering the cooperation of threads between the module of trapping IP packetand the module of packing IP packet, the mutual exclusion of the buffer was employed by signal lamp. It was expounded uponthe trap and pack of IP packet within TCP/IP protocol based on Linux platform.