Design and implementation of high-speed network traffic sensor for emergency response

Ya-zhou MA; Jian GONG; Wang YANG

doi:10.3969/j.issn.1000-436x.2014.z1.010

您当前的位置：

首页 >

文章列表页 >

Design and implementation of high-speed network traffic sensor for emergency response

New network technology and its application | 更新时间：2024-06-05

- Design and implementation of high-speed network traffic sensor for emergency response
- Journal on Communications Vol. 35, Issue Z1, Pages: 46-51(2014)
- 作者机构：
  
  东南大学计算机科学与工程学院，江苏南京 211189
- 作者简介：
- 基金信息：
- DOI：10.3969/j.issn.1000-436x.2014.z1.010
  CLC： TP309
- Online First：2014-10，
  
  Published：25 October 2014
- 稿件说明：
移动端阅览
Ya-zhou MA, Jian GONG, Wang YANG. Design and implementation of high-speed network traffic sensor for emergency response[J]. Journal on Communications, 2014, 35(Z1): 46-51.
DOI：

Ya-zhou MA, Jian GONG, Wang YANG. Design and implementation of high-speed network traffic sensor for emergency response[J]. Journal on Communications, 2014, 35(Z1): 46-51. DOI： 10.3969/j.issn.1000-436x.2014.z1.010.

摘要

摘要：网络安全应急响应在网络分析和追踪时需要应急采集，即捕获特定IP、端口、协议的原始分组。基于高速网络分组捕获工具PF_RING DNA，利用多核多线程并发采集与规则匹配的网络分组，并分配共享缓冲区提高分组的磁盘存储性能，同时通过对采集规则设置不同的状态，实现动态添加采集规则和人为干预采集过程。实验结果表明，在双万兆网卡的环境下，应急采集系统可以捕获并处理19.98 bit/s(3.5 Mpacket/s)的网络流量，最大应急采集速率为1 297 Mbit/s（204.9 kpacket/s）。

Abstract

In the network analysis and tracking

network security emergency response needs a emsrgency sensor that captures saw packets of specific IP

port

protocol.Base on the high-speed packet capture tool PF_RING DNA

it uses mutil-thread to capture network packets that match sensor rules

and allocates the shared buffer to improve the performance of the disk storage of packets

at the same time through setting different states for the packet sensor rule

impliments adding sensor rules and human intervention dynamically.The experimental results show that in the dual 10 Gigabit NICs environment

emergency sensor can capture and handle network traffic of 19.98 Gbit/s(3.5 Mpacket/s)

and the maximum rate of emergency sensor is 1 297 Mbit/s(204.9 kpacket/s).

关键词

Keywords

references

孙成峰 . 面向万兆网络的滥用入侵检测系统改进 [D ] . 东南大学 , 2013 .

SUN C F . The Improvement of Misuse Intrusion Detection System in 10 Gbps Ethernet [D ] . Southeast University , 2013 .

吕少阳 . CHAIRS系统运行管理与离线检测的设计与实现 [D ] . 东南大学 , 2013 .

LV S Y . The Research and Implementation of Operation Management System and Offline Detection System of CHAIRS [D ] . Southeast University , 2013 .

林洪周 . 万兆网络数据包捕获系统的研究与开发 [D ] . 华中科技大学 , 2008 .

LIN H Z . The Research and Development of 10 Gbps Network Packet Capture System [D ] . Huazhong University of Science & Technology , 2008 .

张显 , 黎文伟 . 基于多核平台的数据包捕获方法性能评估 [J ] . 计算机应用研究， 2011 .

ZHANG X , LI W W . Performance evaluation of packet capture methods based on multi-core platform [J ] . Application Research of Computer , 2011 , 28 ( 7 ).

Packet Capture Performance at 10 Gbit:PF_RING vs TNAPI [EB/OL ] . http://www.ntop.org/pf_ring,2014.8 http://www.ntop.org/pf_ring,2014.8 .

钟婷 , 刘勇 , 耿技 . 基于 IXP2400 网络处理器的高速包过滤的研究 [J ] . 计算机应用 , 2005 , 25 ( 11 ).

ZHONG T , LIU Y , GENG J . Study on fast packet filter under network processor IXP2400 [J ] . Computer Application , 2005 , 25 ( 11 ).

CAMPBELL S , MELLANDER J . Experiences with intrusion detection in high performance computing [J ] . CUG ， 2011 .

王韬 . 高速网络环境下的报文监测 [D ] . 东南大学 , 2004 .

WANG T . Packet Sensor on High Speed Network [D ] . Southeast University , 2004 .

Views

606

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Proactive migration model of SWIM service based on situation awareness

Related Author

Zhijun WU

Shengyan ZHOU

Jin LEI

Related Institution

College of Electronic Information and Automation,Civil Aviation University of China

AI问答

⁰