作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2007, Vol. 33 ›› Issue (19): 140-142. doi: 10.3969/j.issn.1000-3428.2007.19.049

• 安全技术 • 上一篇    下一篇

基于网络处理器的网络信息审计系统

廖明涛,张德运,李金库   

  1. (西安交通大学电信学院网络所,西安 710049)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2007-10-05 发布日期:2007-10-05

Network Information Audit System Based on Network Processor

LIAO Ming-tao, ZHANG De-yun, LI Jin-ku   

  1. (Network Institute, School of Telecommunication, Xi’an Jiaotong University, Xi’an 710049)
  • Received:1900-01-01 Revised:1900-01-01 Online:2007-10-05 Published:2007-10-05

摘要: 传统基于通用处理器和ASIC的解决方案无法兼顾网络信息审计系统对高性能和灵活性的要求。该文以网络处理器IXP2400为例,对基于网络处理器的信息审计系统结构进行了研究,阐述了其数据处理机制、资源分配和核心关键技术。利用Radisys公司的接口卡ENP-2611,对提出的系统结构进行了实现,并研究了基于网络处理器的高效中英文多模式匹配算法。试验表明,系统的处理速度约为500Mb/s,和已有的实现相比,在性能上有较大程度的提高。

关键词: 网络信息审计, 网络处理器, IXP2400

Abstract: Traditional system architectures based on general purpose processor and ASIC can not satisfy requirements to high performance and flexibility of network information audit system. Taking IXP2400 for example, this paper researches the system architecture of network information audit system based on network processor, provides its implementation method and related key technologies. By using interface card ENP-2611 of Radisys company, its implements the proposed system, researches the high efficiency Chinese-English multi-pattern matching algorithm based on network processor. The experiment shows that the speed of proposed system is about 500Mb/s, which is higher than existing systems.

Key words: network information audit, network processor, IXP2400

中图分类号: