关键词: 网络监测 报文捕获 零拷贝 上下文切换

Abstract:

Network monitoring becomes more and more important in a modern IP-based network infrastructure. The increasing link speed highlights the inefficiencies of the existing packet capturing engine, which is the critical part of network monitoring. FPC is a high-performance packet capture engine based on the Linux kernel. FPC can effectively improve the performance of network monitoring applications. In this paper the possible bottlenecks in the hardware and software layers are analyzcd first. Then FPC＇s overall structure and the key techniques of implementation are presented. Test and applications show   that FPC has high performance.

Key words: network monitoring, packet capture, zero copy, context switch