The Design And Implementation Of Gigabit Ethernet Network Traffic Monitoring System With Network Processor

With the rapid development of network technologies, networks are becoming more and more complicated as the scale of networks are expanding, new applications are emerging, and the heterogeneity of networks is deepening. It is necessary to monitor networks traffic in real time and manage networks on-line. Network measurement can be classified into active measurement and passive measurement accroding to whether test packets are injected into networks. Network traffic measurement belongs to passive measurement techology. Through network traffic measurement, we can obtain the details of the traffic, such as link utilization, the distribution of the different protocols, the distribution of packet size, and so on. It will guide the maintaince and management of networks and facilitate the design of networks.There are many challenges in high-speed network traffic monitoring,for example packet capturing and flow classification. The existing toolsmainly perform at low speed link because of hardware capability limitation.At high-speed link, many problems are still unresolved. For instance, thepacket capturing of high-speed link, the quickly matching of flow, thedefininition of monitor metrics, the storage of flow and the end jugementof a flow are still not in uniform way. This thesis mainly focuses on thecapturing of the packet, the flow classification and the measurementmetrics. In this thesis, a new method to capture the packet by directlyoperating the DMA ring has been proposed and implemented. Combiningthe Adaptive Hash Buckets storage structure and XOR Folding algorithm, anew hash function for implementation flow matching has been designed.Finally, a gigabit ethernet network traffic monitoring system has beendesigned and implemented with the achievement of the thesis.The main works of this thesis are described as following:1) Proposing a method of Ethernet frame capturing and generating inBIOS with direct memory access (DMA) for network processor. Ithas been showed from experiment the performance of packet captureand generation with this method on BCM 1250 has been improveddouble over on embedded linux. This method has been used in the...