节点文献
包过滤系统中关键字过滤的实现及其性能分析
Implementation of the keyword filter in the packet filter system and catability analysis
【摘要】 一般的包过滤系统仅对IP(InternetProtocol)地址、端口类型等项目进行过滤。笔者提出了对数据包中的数据按照关键字进行过滤的方法,并基于KMP(Kunth-Morris-Pratt)关键字匹配算法,对该系统进行了相应的性能测试。在测试环境下,得出网络吞吐量为75%,1000字节长的数据帧的平均过滤时延约为100μs等一系列测试数据。通过对过滤时延的分析及网络吞吐量的测试结果表明,该方案所设计的系统性能基本能够满足实际要求。
【Abstract】 Common packet filter system can only filt er the project based on the IP address and port type, a method to filter aimed a t the data in data packet according to the key word is presented.On the bas is of the key word KMP(Kunth-Morris-Pratt) arithmetic, tests the function of the system accordingly ,thus gets a series of testing data as throughput is 75% and average filtrate d elay is about 100 μs for frame of 1 000 bytes in testing environment .Through t he analysis of the filter delay and the network throughput, presents that the syst em performance designed by this scheme can meet the performance needs of practic al use.
【Key words】 Firewall; Packet filter; Keyword-method-arit hmetic; Filter delay; Throughput;
- 【文献出处】 吉林大学学报(信息科学版) ,Journal of Changchun Post and Telecommunication Institute , 编辑部邮箱 ,2003年02期
- 【分类号】TP393.08
- 【被引频次】14
- 【下载频次】219