Fast detection method of data packets in user space based on DPDK

A technology of user space and detection method, which is applied in the field of information security, can solve the problems of packet loss rate and difficult matching of throughput, and achieve the effect of avoiding resource competition, reducing performance loss, and avoiding performance damage

Active Publication Date: 2018-04-13
NANJING UNIV OF POSTS & TELECOMM
View PDF2 Cites 19 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] Under the new network situation, in the face of a large number of high-speed and high-throughput network environments, the data collection...

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Fast detection method of data packets in user space based on DPDK
  • Fast detection method of data packets in user space based on DPDK

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0035] In order to clarify the technical scheme and technical purpose of the present invention, the present invention will be further introduced below in conjunction with the accompanying drawings and specific implementation methods.

[0036] A DPDK-based fast detection method for data packets in user space is mainly based on two points:

[0037] The first is to receive the data flow from the network card, configure the multi-queue of the network card, bind the queue to the specified CPU logic core, and transfer the data packet to the user space provided by DPDK, bypassing the linux kernel.

[0038] The second is to process data packets in user space, strip data frames until reaching the application layer, mainly analyze the characteristics of http messages, and compare and classify and identify the characteristics of various applications in each application layer. In this way, fast and effective data monitoring under large flow is realized.

[0039] DPDK focuses on the high-...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a fast detection method of data packets in a user space based on DPDK. The method comprises the following steps: A, receiving data streams from a network card, configuring multiple queues of the network card, binding the queues with a specified CPU logic kernel, and transferring the data packets into the user space provided by the DPDK by passing the linux kernel; B, processing the data packets in the user space provided by the DPDK, specifically; B1, stripping off data frames until to application layers; B2, analyzing HTTP message features, and comparing the features of various applications of the application layers for classification and identification; and C, finally recording to classification result, and completing the test.

Description

technical field [0001] The invention belongs to the field of information security, in particular to a DPDK-based fast detection method for data packets in user space. Background technique [0002] Nowadays, the number of 4G network and computer network users has risen sharply, and the use of various smart mobile terminals has caused explosive growth in the ingress and egress traffic of the core network. Network traffic records the current operating status of the network, so the analysis of network traffic helps network managers to test network performance, and according to the test results, optimize the network architecture, find abnormal traffic, and troubleshoot network faults. , and finally take corresponding control measures. [0003] Under the new network situation, facing a large number of high-speed and high-throughput network environments, the data collection mechanism based on the traditional operating system kernel has been difficult to match the existing needs in...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L12/24H04L12/26H04L12/803H04L12/863H04L29/06G06F9/54
CPCG06F9/546H04L41/0823H04L43/08H04L43/10H04L47/125H04L47/50H04L69/161H04L69/22
Inventor 李鹏王灿帅徐鹤王汝传罗保州朱文俊靳梦晓
Owner NANJING UNIV OF POSTS & TELECOMM
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap