China Telecom Network Security System: Ethernet Packet Generator

When people enjoy their comfortable life from quick development of Internet, they are troubled by network security problem either. Today, how to protect Internet data becomes more and more important, especially for corporation's core data.In order to solve such Internet security problem and protect corporation self data, Hangzhou subsidiary company of Chine telecom has setup an Internet security processor project, which could encrypt company's network data during networking transmission and decrypt these encrypted data at the end of receiver processor.Network packet generator is the one of test sub-module in Internet security processor project, and is used to generate different networking packets include IPsec, SRTP, MACsec and IPComp etc protocols. It also supports Ethernet packet parsing and comparing.Packet generator is designed in layer, which means to put different packet header in to different layer:1. Ethernet layer; 2. IP layer; 3. IPsec layer; 4. Inner IP layer; 5. Transport layer; 6. Application layer; 7. Trailer layer. Such design is really like real networking module and is really helpfully on adding more new protocols in the future. Exclude generating Ethernet packet under direct and random mode, packet generator also support to update packet header fields automatic. Although, packet generator has many complex features inside, after use class encapsulation, it only provides simple function interface to upper layer module in the test environment.In the whole project, packet generator is the one of key verification module to provide all of packets combination for simulation. The full coverage of packets combination guarantees that security processor could be produced and successfully used in the future. Else, based on stand Ethernet packets output, packet generator can be re-used in other new Internet projects easily if the project uses the same development tools.