基于Linux的网络防火墙中IP碎片重组算法的研究与实现

Research and Implementation of the IP Datagram Reassembly Algorithms in Network Firewall Based on Linux

文章对IP碎片重组算法RFC815进行了讨论,针对原算法中存在的问题进行了有效的改进,并将该算法应用到基于Linux的网络防火墙中,实现了简洁、高效的IP碎片重组算法。

This paper discusses the IP datagram reassembly algorithms (RFC815).Aiming at the shortcomings of the algorithm,this paper brings forward a set of effective methods to improve the algorithm,which is applied to the Network Firewall Based on Linux.A simple and effective algorithm of the IP datagram reassembly is presented.