Abstract:

We analyze the data packet capture technology based on intel dpdk in depth, point out in detail the advantages and disadvantages of dpdk in current development of packet capture technology. We then design and implement a packet capture system based on Linux by dpdk, and apply it to a gigabit network security protection system successfully. Utilizing the BPS software, we simulate our system and the network security protection system based on pf_ring. Simulation results show that dpdk can improve the overall system performance, achieve good effect, thus  verifying the feasibility of the proposed method.

Key words: data packet capture, dpdk, network security protection system, BPS, pf_ring