An efficient tcp flow reassembling algorithm based on PF_RING

Author

Hao, Jie ; Hao, Yu-jie ; Chang, Jia-yu ; Li, Jian-ping

Author_Institution

Dept. of Comput. Sci. & Eng., Univ. of Electron. Sci. & Technol. of China, Chengdu, China

fYear

2009

fDate

23-25 Oct. 2009

Firstpage

246

Lastpage

249

Abstract

Along with the development of Internet/Intranet application, more and more sensitive data is transmitted through the network. In order to prevent the critical data from being divulged and guarantee the security of information, we should pay more attention to the surveillance of network traffic. With this motivation, we present an efficient TCP flow reassembling algorithm which is the key of dataflow processing. Through this method, it is possible to get a whole idea of every TCP flow and providing a good reference to judgment. Testing of a prototype based on PF_RING demonstrated that our mechanism take a good performance in linux kernel 2.6.28.

Keywords

Internet; Linux; algorithm theory; data flow computing; intranets; transport protocols; Internet application; Intranet application; PF_RING; dataflow processing; efficient TCP flow; good reference judgment; linux kernel; prevent critical data; reassembling algorithm; security information; sensitive data transmitted; surveillance network traffic; Data security; IP networks; Information security; Intrusion detection; Linux; Protocols; Prototypes; TCPIP; Telecommunication traffic; Testing; TCP Segment; TCP Session; TCP flows; TCP packet; reassembling;

fLanguage

English

Publisher

ieee

Conference_Titel

Apperceiving Computing and Intelligence Analysis, 2009. ICACIA 2009. International Conference on

Conference_Location

Chengdu

Print_ISBN

978-1-4244-5204-0

Electronic_ISBN

978-1-4244-5206-4

Type

conf

DOI

10.1109/ICACIA.2009.5361107

Filename

5361107