The invention discloses a design method of a
network packet catcher, and belongs to the technical field of
network security detection and monitoring. The method has the advantages that
network data are obtained from an MAC layer of network transmission in a physical
bus mode,
software buffering and tedious forwarding processes are omitted, message obtaining
delay is compressed to the
nanosecond level, bottom layer logic obtained and captured in the physical
bus mode does not need
software participation, direct connection between a customized hardware circuit and a
physical layer is relied on, and the
network data are obtained through the network transmission MAC layer. According to the method,
software defects are avoided, the stability and reliability of packet capturing operation are linearly improved, a real-
time data direct
transmission technology is utilized, local caching is not needed, hardware cost is reduced, the problems of low efficiency and
data loss caused by caching are avoided, a single MCU is introduced to perform synchronous setting on a packet capturing device
phy and a communication
phy, and on the basis of
clock synchronization and
signal control functions integrated by the MCU, the reliability of the packet capturing operation is improved. An intelligent scheduling
algorithm and a bottom-layer driving program are matched, the MCU controls the working states of the two in real time, and the
rhythm and parameters are flexibly adjusted.