递进式网络数据包解析与过滤方法研究

摘要

On the basis of analysis of the demand of the enterprise internal network monitoring system, an approach of progressive network packets parsing and filtering used for internal network monitoring system is proposed, which has three main functions including capturing, parsing and filtering the network packets, and mainly analyzes the implementation of parsing and filtering the packets. Parsing packets progressively and efficient BM algorithm for rule-matching are adopted to improve the efficiency of parsing and filtering the packets. The experimental results show that this method causes little delay to network data transmission, and the internal network users can hardly feel the effect when they are using the network.%在分析企业对内部网络监控系统需求的基础上,提出了一种适用于内网监控系统的递进式网络数据包解析与过滤的方法.该方法包括网络数据包的截获,解析和过滤3个主要功能,其中主要分析了数据包解析与过滤的实现,采用递进式分级解析数据包的方式和高效的BM模式匹配算法进行规则匹配,提高了数据包解析过滤的效率.实验结果表明,该方法的应用对网络数据传输产生的延时较小,基本不影响内网用户对网络的正常使用.