libpcap-MT一种多线程的通用数据包捕获库.pdf

计算机研究与发展 ISSN i000—12391CNii一1777]TP of Researchand JournalComputer Development libpcap—MT：一种多线程的通用数据包捕获库 温曙光1’2 谢高岗1 1(中国科学院计算技术研究所北京100190) 2(中国科学院研究生院北京100190) (xie@ict．ac．en) General Packet withMulti·-Thread libpcap‘-MT：APurposeCaptureLibrary and Wen Xie Shuguan91’2Gaogan91 1(Institute ofComputingTechnology，ChineseAcademyof 100190) Sciences，Beijing 2(Graduate Chinese Universityof AcademyofSciences，BeOing100190) Abstract isa the APIsfor libpcappacket and capturelibraryprovidingupper packetcapture，filter other used innetwork functionalities，and detectionand being widely protocolanalysis，intrusion other isfeasibleto withmulti—core packetprocessingsystems．It performhigh—speedpacketprocessing andmuhi-CPUarchitectureongeneralpurposecomputing itisdifficulttotakefull platform，but ofthe ofmulti_—coreandmulti-。CPUfor based ofits advantage on because capability applicationslibpcap threadmodel．Inthis and a single multi-thread paper，wedesignimplement packetcapturelibrary named basedon can and to buffer libpcap—MT libpcap．1ibpcap-MTcapturedispatchpacketsmultiple inkernelmode．Inkernel and reduces queuesveryefficiently capturingdispatching