TCP包状态检测系统的硬件设计与实现

摘要

The article describes a TCP packets state detection system based on hardware. Compared with traditional state detection sys- tem, some new methods are presented. First, in order to prevent packets data intrusion, the data matching of established state is presented; Second, the use of features of hash algorithm fast and storage, to find information to achieve state of information storage and conversion; Third, the timeout address cycle management strategy is used to manage the connection timed out. Experimental results show that the TCP state transition function of this system can he achieved quickly and accurately, while it can prevent some packets data attacking.%提出了一种利用硬件实现的TCP包状态检测系统模型，与传统的状态检测系统的区别在于：1）提出established状态时的数据匹配，以防止包数据的攻击；2）利用哈希算法快速存放、查找信息的特点实现状态信息的存储和转换；3）采用时间地址循环超时管理策略来管理超时的连接。实验结果表明，该设计在能防止一些网络数据攻击的基础上快速准确地实现TCP状态转换功能。