基于零拷贝的网络数据捕获技术的研究与实现

以传统捕包平台为研究对象,着重分析了高速网络环境下数据拷贝、硬件中断对捕包性能的影响,根据"零拷贝"思想提出了改进的方法,实现了网络接口设备直接将数据报文存储到应用程序可以访问的地址空间,减少了数据报文在内核态里传输时的数据拷贝次数,降低了网络数据接收的延迟;通过减少网卡接收报文时的中断次数,增加每次中断处理的报文数,节省了CPU时间,提高了在高速网络环境中主机对网络数据包的捕获和实时处理能力。仿真实验验证了该方法的可行性。

Study and Implementation of High-speed Network Packet Capture Based on Zero-Copy

Through an analysis of data copy and hardware interrupt for the performance of packet-cap- ture in high-speed network environment,an improved method based on"zero-copy"concept is proposed in this paper.Interface equipments store data packets in the address space that is directly accessible to the application programs,thus reducing the data copy number of data packets when transmitted in the kernel state,and decreasing the latency of data reception.By reducing interruption number of network card and in- creasing packet number of interruption process every time,CPU time is saved and better performance of data capture and real-time process is obtained in high-speed network environment.Simulation results verify the feasibility of this method.