ZHANG Pan-yong1, WANG Da-wei1, ZENG Yu1, et al. Network packet capture oriented INIC design and implementation[J]. 2006, (2): 125-130.DOI:
专用捕包网络适配器的设计与实现
摘要
随着网络带宽的不断增长
网络安全系统对网络数据包捕获的能力提出了更高的要求。为了提高网络数据包的捕获能力
降低主机系统的资源消耗
设计实现了基于TOE思想的专用捕包网络适配器
基于高性能的嵌入式硬件平台
采用了零拷贝
自适应半轮询
自适应轮询定时器的关键技术实现系统。测试表明
专用捕包网络适配器显著的提高了系统的捕包性能
大大降低了主机CPU的使用率。
Abstract
As the rapid growth of network bandwidth
the capability of packet capture has became the bottleneck of whole network security system.To increase the capability of packet capture and decrease the system overhead
a packet capture oriented INIC was proposed.Implemented on high performance embedded system
the INIC apply techniques such as zero-copy
adaptive semi-polling
adaptive polling watchdog to ensure the system efficiency.The result of performance evaluation exposes that the INIC remarkably increases the system’s packet capture performance