作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2009, Vol. 35 ›› Issue (20): 160-162. doi: 10.3969/j.issn.1000-3428.2009.20.056

• 安全技术 • 上一篇    下一篇

RTAI下的网络报文捕获平台

段辰生1,杨昌昊2,褚 伟1   

  1. (1. 合肥工业大学计算机网络系统研究所,合肥 230009;2. 中国科学技术大学工学院,合肥 230027)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2009-10-20 发布日期:2009-10-20

Network Packet Capture Platform Based on RTAI

DUAN Chen-sheng1, YANG Chang-hao2, CHU Wei1   

  1. (1. Computer Network Systems Research Institute, Hefei University of Technology, Hefei 230009;2. Engineering Institute, University of Science and Technology of China, Hefei 230027)
  • Received:1900-01-01 Revised:1900-01-01 Online:2009-10-20 Published:2009-10-20

摘要: 针对传统报文捕获机制中内存拷贝冗余、中断处理及上下文切换频繁等弊端,提出在用户空间控制报文传输的思想,采用实时Linux内核及零拷贝思想对网卡驱动进行改造。捕包平台在捕获64 Byte及1 500 Byte的报文时,吞吐量分别达到了473 Mb/s和943 Mb/s,实验结果证明,与传统报文捕获平台相比,新平台的性能有显著提高。

关键词: 零拷贝, 报文捕获, 实时Linux

Abstract: Aiming at the drawbacks of traditional packet capture mechanism such as redundantly memory copy, frequently interrupt handle and context switch, this paper proposes the idea that control the packet transmission in user space, uses real-time Linux kernel and zero-copy to reform the NIC device driver. The throughputs of new packet platform result for 64 Byte and 1 500 Byte are 473 Mb/s and 947 Mb/s. Experimental result proves that compared with the traditional platform, the new platform gets a remarkable enhancement on performance.

Key words: zero copy, packet capture, real-time Linux

中图分类号: