Design And Implementation Of High-Performance Network Data Packet Capture Tool Online

With the rapid development of computer networks, network traffic and bandwidthis growing rapidly, a variety of network applications security while facing enormouschallenges. Network packet capture plays a fundamental role in a variety of networksecurity technology., and with the widespread use of fiber-optic cable, the networkbandwidth has reached the level Gigabit even10-Gigabit. Some of the traditionalnetwork packet capture tools has been unable to meet current high-speed network forneeds of data capture.The network data packet capture system in this paper is proposed based onanalyzing the traditional network packet capture technology, and combining thefeatures of the multi-core processor development system and high-speed and flexibleI/O interface architecture of the TILExpress-64development board as the hardwarefoundation. Designed and implemented the high-speed on-line network data packetcapture system.This paper describes the host computer system is divided into two parts with thenext crew. The host computer system is based on Wireshark source code, analyzedorganizational structure and operating processes of Wireshark, added the bypasscontrol module simultaneously., used to control multi-core capture system’s operation.The multi-core network packet capture system based on Tilera multi-core developmentsystem, with the researching of multi-core programming model and IPP distributingmechanism and DMA technology, designed and implemented the network packetcapture tool. The data interation is implemented by using the user-defined protocolbetween host computer system and multi-core network packet capture system. Finally,actual test environment is set up to test the network packet capture system, andcompared the capture performance with traditional packet capture technologylibpcap,verifyied the high-efficiency of the network packet capture system in thispaper.