Monitor technique with high flow of data packets in Linux
Linux下的高流量数据包监听技术

The principle of packet monitor to handle high volume packets using the underlying library Libpcap capture in Linux operation system was studied. Network Interface Card (NIC) was used to capture data in bypass monitor to carry out pre-processing. Semi-polling with New API (NAPI) was also used to speed up the processing of packets in input buffer. Finally the queuing theory was used to ensure the optimal bandwidth value and relevant parameters were set to achieve the best efficiency. Experimental results demonstrate that the scheme not only increases the rate of packet capture, but also improves the occupancy rate of system resources in many figures significantly.