| 基于网络处理器的ICMP快速处理方法 |
| |
| 引用本文： | 刘震宇,赖粤,王晓红.基于网络处理器的ICMP快速处理方法[J].计算机工程与设计,2010,31(7). |
| |
| 作者姓名： | 刘震宇 赖粤 王晓红 |
| |
| 作者单位： | 1. 华南理工大学计算机科学与工程学院,广东,广州,510640;华南理工大学电子与信息学院,广东,广州,510640
2. 华南理工大学电子与信息学院,广东,广州,510640 |
| |
| 基金项目： | 教育部科技创新工程重大项目培育基金 |
| |
| 摘 要： | 针对网络处理器IXP 2XXX对所有数据包均根据TCP/IP,协议层的标识逐层进行分析,从而导致ICMP(网际控制报文协议)处理速度慢,抵御ICMP洪水攻击效率低的问题.提出了在网络处理器的微引擎处理中嵌入ICMP处理模块,建立了ICMP模块的处理流程,并通过设置ICMP异常标识进行跳转处理,减少冗余检查的步骤,实现了对异常ICMP的及时处理.仿真实验结果表明,该方法对ICMP数据包的指令周期明显少于原IXP2XXX开发包中的方法,提高了处理ICMP包的性能.
|
| 关 键 词： | 网络处理器 洪水攻击 微引擎 |
Fast ICMP processing method based on network processor |
| |
| LIU Zhen-yu,LAI Yue,WANG Xiao-hong.Fast ICMP processing method based on network processor[J].Computer Engineering and Design,2010,31(7). |
| |
| Authors: | LIU Zhen-yu LAI Yue WANG Xiao-hong |
| |
| Affiliation: | LIU Zhen-yu1,LAI Yue2,WANG Xiao-hong2(1.School of Computer Science , Engineering,South China University of Technology,Guangzhou 510640,China,2.School of Electronics , Information Engineering,China) |
| |
| Abstract: | To solve the problems of slow processing speed of ICMP packets and inefficiency processing of ICMP flood attack in the net-work processor IXP2XXX which analysis all packets layer by layer based on TCP/IP protocol.ICMP process module is proposed to embed in the procedure of micro engines,the processing steps and the symbols of abnormal ICMP are brought forward to reduce redundant checks steps to achieve the timely processing of abnormal ICMP packets.Simulation experiments in Workbench show that the cycles of... |
| |
| Keywords: | ICMP IXA network processor ICMP flood attack micro engine IXA |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
