Understanding Linux Packet Capture Engines: libpcap, PF_RING, DPDK, and XDP

This article compares four classic Linux packet‑capture engines—libpcap (and its mmap variant), PF_RING, DPDK, and XDP—explaining their data‑flow architectures, copy operations, zero‑copy techniques, and typical use‑cases such as DDoS defense and high‑speed networking.

DPDKLinuxPF_RING

0 likes · 9 min read

Understanding Linux Packet Capture Engines: libpcap, PF_RING, DPDK, and XDP

Ctrip Technology

Aug 19, 2016 · Big Data

HBase‑Based Packet Capture and Retrieval System for Large‑Scale Network Traffic

The article presents a method that leverages HBase to capture, store, index, and quickly retrieve massive network packets, using PF_RING and libpcap for high‑performance capture and providing APIs for time‑, IP‑, protocol‑, and port‑based packet backtracking.

Big DataHBasePF_RING

0 likes · 7 min read

HBase‑Based Packet Capture and Retrieval System for Large‑Scale Network Traffic