Dissertation > Excellent graduate degree dissertation topics show

Network data stream high-speed acquisition system design and implementation

Author: ChenWeiPing
Tutor: QinZhiGuang
School: University of Electronic Science and Technology
Course: Information and Communication Engineering
Keywords: Data Capture Zero-copy technology Memory-mapped Linux kernel
CLC: TP393.08
Type: Master's thesis
Year: 2009
Downloads: 213
Quote: 3
Read: Download Dissertation

Abstract

As mankind enters the information age, the relationship between the network and the people are getting closer and closer, it brought in a lot of convenience, but also brought a lot of new problems. Caused by the various countries, the company attaches great importance to the security of the Internet. Passive data capture technology is extremely rich applications, such as IDS, firewall software tcpdump for ethereal, snort adoption of this technology in the field of network security. As many application layer services into applications, making the carrying capacity of the network is very nervous. Due to CPU performance, handling mechanisms of the operating system and other reasons, traditional packet capture has been unable to meet the requirements of the gigabit network. Platform of high performance data acquisition is targeted at Internet backbone network data acquisition and data analysis equipment, support Gigabit and above network data acquisition and data analysis. It collected all data packets transmitted over the network; data analysis capabilities support from the link layer, IP layer, transport layer, until the application layer of the data analysis. The platform provides a convenient secondary development interface, this platform can facilitate the development of content-based network security devices, such as the IPS system DDOS defense system spam filtering systems, etc.. This study and to achieve a high-performance network data acquisition platform underlying packet capture subsystem. It combines \It is mainly several technical part consists of the following components: (1) memory mapping techniques. The system uses a memory-mapped technology, shared a memory area of ??the user space and kernel space. This area of ??memory used to store the data package and the necessary memory management data structures, and to provide support through the use and management of this shared memory for data packets in the high-speed transfer between kernel space and user space. (2) \The system will change the network packet submission process, data packet transfer process by the NIC to the upper application to bypass the kernel protocol stack to avoid copy data from kernel space to user space, thereby improving the efficiency of packet capture. (3) and the protocol reduction and processing system interface module. This system, the space of the user agreement to restore subsystem through the analysis and processing of network packets according to the level registered callback function. This treatment method to restore the upper-layer protocols and processing subsystem provides a high degree of flexibility, upper system combination can register different callback function to meet the needs of different scenarios. In addition, according to the project schedule and requirements Linux2.6 kernel equipped with a version of the PC on the network data stream high-speed acquisition system.

Related Dissertations

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net Mobile