An architecture for high performance network analysis

Author

Risso, Fulvio ; Degioanni, Loris

Author_Institution

Dipartimento di Autom. e Inf., Politecnico di Torino, Italy

fYear

2001

fDate

2001

Firstpage

686

Lastpage

693

Abstract

Most Unix systems provide a set of system calls that allow applications to interact with the network directly. These primitives are useful for example in packet capture applications, which need to grab the data flowing through the network without any further processing from the kernel. WinPcap is a newly proposed architecture that adds these functionalities to Win32 operating systems. WinPcap includes a set of innovative features (such as packet monitoring and packet injection) that are not available in previous systems. This paper presents the details of the architecture and it shows its excellent performance

Keywords

Unix; local area networks; packet switching; performance evaluation; telecommunication computing; telecommunication networks; Unix systems; Win32 operating systems; WinPcap; fast Ethernet LAN; high performance network analysis; packet capture applications; packet injection; packet monitoring; performance; statistics; Band pass filters; Kernel; Libraries; Monitoring; Network interfaces; Operating systems; Performance analysis; Protocols; User interfaces; Workstations;

fLanguage

English

Publisher

ieee

Conference_Titel

Computers and Communications, 2001. Proceedings. Sixth IEEE Symposium on

Conference_Location

Hammamet

ISSN

1530-1346

Print_ISBN

0-7695-1177-5

Type

conf

DOI

10.1109/ISCC.2001.935450

Filename

935450