A fast-deployable packet detection and monitoring system based on many-core network processors

Abstract

The invention provides a data packet detecting and monitoring system based on a multiple-core network processor and capable of being deployed fast. The system is composed of a deploying unit and a multiple-core network processor unit, wherein the deploying unit has program configuring, compiling and loading functions and a processor unit monitoring function, and the multiple cores in the multiple-core network processor are divided into different working groups which include a control management group, a message processing and forwarding group, a message regrouping group and a local control group. The control management group comprises a timer processing module, a remote interaction interface module and a control core module. The message processing and forwarding group comprises a data packet pre-processing module, a data packet detecting and analyzing module and a data packet forwarding module. The message regrouping group comprises a data message regrouping module. The local control group comprises a local interface module and a control core module. The data packet detecting and monitoring system based on the multiple-core network processor and capable of being deployed fast can be configured and deployed to live fast and automatically, can meet data packet detection requirements of networks with large handling capacity in operation, and has a flexible configuring function.

Description

technical field [0001] The invention relates to the field of deep detection of network data packets, and proposes a fast-deployable data packet detection and monitoring system based on the architecture of many-core network processors. Background technique [0002] At present, some bad information exists in the network, which has caused certain pollution to the network environment. In response to this situation, effective regulatory measures are needed. In-depth content inspection for data packets in the network is one of the necessary methods. By analyzing the content of the data packets in the network, it is possible to monitor the data flow in the network and the user's online behavior, timely prevent the circulation of bad information in the network, quickly locate and trace the source, and prevent the occurrence of violations. [0003] Due to the deep content detection of the data packet, it is necessary to perform keyword matching detection on the data load part of th...

AI Technical Summary

Problems solved by technology

Compared with the detection system that only detects the protocol header information of the protocol layer of the data packet, it takes more time and resources to perform deep data packet detection, and in the current high-speed, high-traffic network environment, the data packet detection system also needs to use A specific architecture ensures detection performance and user communication quality, otherwise, the data packet detection system located at a key node of the network will become a bottleneck of network traffic and affect the performance of the entire network

Images