CaptureFoundry: A GPU accelerated packet capture analysis tool
| Autor: | Barry Irwin, Alastair Nottingham, John Richter |
|---|---|
| Předmět: | |
| Zdroj: | Scopus-Elsevier SAICSIT |
| Popis: | Packet captures are used to support a variety of tasks, including network administration, fault diagnosis and security and network related research. Despite their usefulness, processing packet capture files is a slow and tedious process that impedes the analysis of large, long-term captures. This paper discusses the primary components and observed performance of CaptureFoundry, a stand-alone capture analysis support tool designed to quickly map, filter and extract packets from large capture files using a combination of indexing techniques and GPU accelerated packet classification. All results are persistent, and may be used to rapidly extract small pre-filtered captures on demand that may be analysed quickly in existing capture analysis applications. Performance results show that CaptureFoundry is capable of generating multiple indexes and classification results for large captures at hundreds of megabytes per second, with minimal CPU and memory overhead and only minor additional storage space requirements. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|