Analysis and Design of Packet Capture Module in Intrusion Detection System based on Snort
Hongliang Zhu · Xinxi wangluo anquan · 2012
With the rapid development of the network,network bandwidth has been greatly improved.In high speed network environment,higher requirement is needed to the Intrusion Detection System(IDS).The packet capture capability of IDS has become the bottleneck to enhance the system performance.At present most IDS apply Libpcap to capture packet.This paper analyzes and designes an packet caputure module in IDS based on Snort,and then shows the design structure and work process.At last this paper analyzes the system performance by comparison.