基于Libpcap高速率数据包捕获.PDFVIP

中国科技论文在线 基于Libpcap 的高速率数据包捕获 1 2** 吴荣焕 ，周锋 （1. 北京邮电大学计算机学院，北京 100876； 5 2. 北京邮电大学计算机学院 ，北京 100876 ） 摘要：现如今，计算机网络的规模越来越大，网络传输的速率也越来越高，这给传输过程中 的数据带来了很大的安全隐患。而网络流量的实时采集与解析是检测网络是否安全的关键。 为此，随着网络的发展，出现了不少可以监视和检测网络通信的智能化工具。而最基本的网 10 络管理工具就是嗅探器。嗅探器也称数据包分析器，是一些拥有拦截网络传输数据能力的程 序。本文主要介绍了数据包捕获的基本原理，重点说明了基于LIBPCAP 的数据包捕获机制， 成功实现了基于libpcap 的高速率数据包的捕获、解析及存库。 关键词：计算机网络；TCP/IP；LIBPCAP；包捕获；包解析；Mysql 数据库； 中图分类号：TP391 15 High-rate Data Packet Capture Based on Libpcap 1 2 WU Ronghuan , ZHOU Feng (1. School of Computer,Beijing University of Posts and Telecommunications,Beijing 100876; 2. Shcool of Coputer,Beijing University of Posts and Telecommunications,Beijing 100876) 20 Abstract: Nowadays, the scale of the computer networks becomes increasingly large, and the network transmission rate is getting higher and higher, so this brings a lot of security risks to the transmission data. The real-time collection and decoding of network traffic is the key to detect whether the network secure. With the development of the internet,intelligent tools for monitoring and testing network communication have sprung up. The basic network management tool is sniffer. 25 Sniffer, also known as a packet analyzer, is some programs which has the capacity to intercept network data .This paper introduces the basic principles of packet capture, and focus on the packet capture mechanism based on the LIBPCAP, also the successful implementation of high-speed packet capture,decoding and repository based on LIBPCAP. Key words: com