The Design And Implementation Of Packet Capture And Filter System Based On Zero-copy

Along with network widespread application and networking popularization, the network security question is day by day prominent, and has aroused each kind of user's interest. The traditional firewall and the data encryption technology only protects the system passively, but invades the examination is one kind of initiative safe protective measure. But the current invasion examination system faces the main question is the network data packet gathering speed too is slow, the examination technology development follows not to access the net the fast fast development.This article decides in establishing one kind of low cost high efficiency the network data packet filtration system. The article first introduced how founds the filtration system platform:One kind based on the Linux essence pattern under embedded platform, discussed the Linux essence composition, the Linux essence translation, the root filing system with emphasis has had custom-made. Makes the improvement and cutting out by the Linux system as the starting point, establishes the system movement the security steady platform. Afterwards the network card driver and the memory supervisor has manufactured the thorough research to the Linux system under, the round operating system to the data packet agreement stack analysis, reduced the data packet copy number of times, has realized the zero copy, obviously enhances the filtration system the network data packet gathering speed. The third part of application pattern matching algorithm to the data packet which gathers carries on the highly effective filtration.Finally, through applies this set based on the Linux essence pattern data packet filtration system in the real network environment, has carried on the actual environment test.