Abstract:With the development of Internet application and the increase of network bandwidth,security issues become increasingly serious.In addition to the spread of the virus,spams and DDoS attacks,there have been lots of strongly hidden attack methods.Network probe tools which are deployed as a bypass device at the gateway of the intranet,can collect all the traffic of the current network and analyze them.The most important module of the network probe is packet capture.In Linux network protocol stack,there are many performance bottlenecks in the procedure of packets processing which cannot meet the demand of high speed network environment.In this paper,we introduce several new packet capture engines based on zero-copy and multi-core technology.Further,we design and implement a scalable high performance packet capture framework based on Intel DPDK,which uses RSS (receiver-side scaling) to make packet capture parallelization and customize the packet processing.Additionally,this paper also discusses more effective and fair Hash function by which data packet can be deliveried to different receiving queues.In evaluation,we can see that the system can capture and process the packets in nearly line-speed and balance the load between CPU cores.

Design and implementation of a high-speed network traffic measurement system

High Speed & Precision Wireless Measurement System for FOG

Real-time Data Transmission of the Digital Simulation System Based on Network

Design and Implementation of Network Traffic Analysis System

Research of High-speed Network Bandwidth Measurement Method

A Real-Time Network Traffic Profiling System

Novel traffic measurement architecture for high-speed IP network

Design and Implementation of High-Speed Network Traffic Sensor for Emergency Response

The Hardware Measurement System for High-Speed Network Flow

Network Traffic Analysis System Based on IPFIX

A Parallel Strategy for Measuring Network Bandwidth

High Speed Traffic Archiving System For Flow Granularity Storage And Querying

A High-Speed Real-Time HTTP Performance Measurement Architecture Based on Network Processor

An Expansible High-Speed Network Traffic Passive Measurement Platform

High Speed Self-Study Packet Classification Method for Traffic Measurement on Ip Backbone

Application of Zero-Copy Technology to Network Analysis System

Bottleneck Analysis for Data Acquisition in High-Speed Network Traffic Monitoring

Realtime Capture of High-Speed Traffic on Multi-Core Platform

Adaptive Sampling Measurement for High Speed Network Traffic Flow

Research on High-Speed Network Data Stream Capture Based on Multi-Queue NIC and Multi-Core Processor