基于dpdk的高效数据包捕获技术分析与应用

计算机工程与科学

基于dpdk的高效数据包捕获技术分析与应用

赵宁1,谢淑翠2

（1.西安邮电大学通信学院，陕西西安 710061；2.西安邮电大学理学院，陕西西安 710061）

收稿日期:2015-06-29 修回日期:2015-11-05 出版日期:2016-11-25 发布日期:2016-11-25
基金资助:
陕西省自然科学基础研究计划(2015JM6263)

Analysis and application of the high performance data

packet capture technology based on dpdk

ZHAO Ning1,XIE Shucui2

(1.School of Communication Engineering,Xi’an University of Posts and Telecommunications,Xi’an 710061;

2.School of Science,Xi’an University of Posts and Telecommunications,Xi’an 710061,China)

Received:2015-06-29 Revised:2015-11-05 Online:2016-11-25 Published:2016-11-25

摘要/Abstract

摘要：

对Intel dpdk数据包捕获技术进行了深入研究，对其优缺点进行了详细的分析。在此基础上，利用dpdk设计并实现了一套基于Linux的数据包捕获系统，成功地将其应用于千兆网络安全防护系统中。使用BPS软件对基于dpdk的网络安全防护系统与基于pf_ring的网络安全防护系统进行仿真分析,结果表明dpdk对整体系统性能的提高成效显著，取得了良好的效果，验证了该方法的可行性。

关键词: 数据包捕获, dpdk, 网络安全防护系统, BPS, pf_ring

Abstract:

We analyze the data packet capture technology based on intel dpdk in depth, point out in detail the advantages and disadvantages of dpdk in current development of packet capture technology. We then design and implement a packet capture system based on Linux by dpdk, and apply it to a gigabit network security protection system successfully. Utilizing the BPS software, we simulate our system and the network security protection system based on pf_ring. Simulation results show that dpdk can improve the overall system performance, achieve good effect, thus verifying the feasibility of the proposed method.

Key words: data packet capture, dpdk, network security protection system, BPS, pf_ring

赵宁1,谢淑翠2. 基于dpdk的高效数据包捕获技术分析与应用[J]. 计算机工程与科学.

ZHAO Ning1,XIE Shucui2.

Analysis and application of the high performance data

packet capture technology based on dpdk

[J]. Computer Engineering & Science.

参考文献

［1］Qian Zhenglin, Gao Hang, Li Shuqiang. DBMS audit based on network listener［J］.
Computer System & Applications,2014,23(4):97101.(in Chinese)

［2］Xu Hui,Jiang Heng,Yang Lin.Research and design on packet capture technology PF_RING［J］.Computer Science,2012,39(S2):8990.(in Chinese)

［3］Wang Bailing,Fang Binxing,Yun Xiaochun.The analyisis of the performance factor in traditional packet capture plat［J］.
Computer Engineering and Applications,2003,22(2):151152.(in Chinese)

［4］Wang Bailing,Fang Binxing,Yun Xiaochun.The study and implementation of zerocopy packet capture platform［J］.Chinese Journal of Computers,2005，28(1):4652.(in Chinese)

［5］Intel data plane development kit (Intel DPDK) programmer’s guide June 2014［EB/OL］［20141213］.http://www.dpdk.eu/doc/guides/prog_guide/overview.html#corecomponents.

［6］Mogul J C, Ramakrishnman K K. Eliminating receive livelock in an interruptdriven kernel［J］.ACM Transactions on Computer Systems,1997,15(3):217252.

［7］Guo Kai.Design and implementation of system of network data packet capture based on WinPcap［J］.Xi’an:Xidian University,2013：78.(in Chinese)

［8］Zhang Rui.Application and implementation of the efficient packet capture technology based on Gigabit Nics［D］.Chengdu:University of Electronic Science and Technology,2010:4245.(in Chinese)

［9］Deri L.Highspeed dynamic packet filtering［J］.Journal of Network and System Management,2007,15(3):401415.

［10］Liu Baochen.The research and implementation of high performance packet capture system［D］.Shanghai:Shanghai Jiao Tong University,2013：811.(in Chinese)

［11］Li Shu. Research and design of packets collection system based on Linux multicore platform［D］.Beijing:University of Beijing Post and Telecommunications,2012：58.(in Chinese)

附中文参考文献：

［1］钱正麟,高航,李曙强.基于网络侦听的数据库审计方法［J］.计算机机系统应用,2014,23(4):97101.

［2］徐慧，姜恒，杨林.PF_RING高效数据包捕获技术研究与设计［J］.计算机科学,2012,39(S2):8990.

［3］王佰玲，方滨兴，云小春.传统报文捕获平台性能影响因素分析［J］.计算机工程与应用，2003,22(2):151152.

［4］王佰玲，方滨兴，云小春.零拷贝报文捕获平台的研究与实现［J］.计算机学报，2005，28(1):4652.

［7］郭凯.基于WinPcap的数据包捕获系统的设计与实现［D］.西安：西安电子科技大学，2013：78.

［8］张瑞.基于千兆网卡的高效数据包捕获技术的应用与实现

［D］.成都：电子科技大学,2010：4245.

［10］刘宝辰.高性能数据包捕获系统的研究与实现［D］.上海：上海交通大学，2013：811.

［11］李舒.基于Linux多核平台的高性能报文采集系统的研究与设计［D］.北京：北京邮电大学,2012：58.