Improving Kernel performance for network sniffing

Download

index.pdf

Date

2003

Author

Topaloğlu, Mehmet Ersan

Metadata

Show full item record

Item Usage Stats

96
views

0
downloads

?G Sniffing is computer-network equivalent of telephone tapping. A Sniffer is simply any software tool used for sniffing. Needs of modern networks today are much more than a sniffer can meet, because of high network traffic and load. Some efforts are shown to overcome this problem. Although successful approaches exist, problem is not completely solved. Efforts mainly includes producing faster hardware, modifying NICs (Network Interface Card), modifying kernel, or some combinations of them. Most efforts are either costly or no know-how exists. In this thesis, problem is attacked via modifying kernel and NIC with aim of transferring the data captured from the network to the application as fast as possible. Snort [1], running on Linux, is used as a case study for performance comparison with the original system. A significant amount of decrease in packet lost ratios is observed at resultant system.

Subject Keywords

Computer networks, Telecommunication, Data transmission systems, Sniffer, Kernel modification, Driver modification

URI

http://etd.lib.metu.edu.tr/upload/1097856/index.pdf
https://hdl.handle.net/11511/13795

Collections

Graduate School of Natural and Applied Sciences, Thesis

Suggestions

OpenMETU
Core

Optimal data compression for lifetime maximization in wireless sensor networks operating in stealth mode Incebacak, Davut; Zilan, Ruken; TAVLI, BÜLENT; Barcelo-Ordinas, Jose M.; Garcia-Vidal, Jorge (2015-01-01) Contextual privacy in Wireless Sensor Networks (WSNs) is concerned with protecting contextual information such as whether, when, and where the data is collected. In this context, hiding the existence of a WSN from adversaries is a desirable feature. One way to mitigate the sensor nodes' detectability is by limiting the transmission power of the nodes (Le., the network is operating in the stealth mode) so that adversaries cannot detect the existence of the WSN unless they are within the sensing range of the ...
An alternative multi-tone representation of complex signals for feedforward systems Coskun, Hakan; Mutlu, Ahmet; Demir, Şimşek (2004-12-01) Signals used in wireless communication have various stochastic behaviors depending on the type of the modulation. The systems are nonlinear and analysis of these systems with various types of signals is tedious. Therefore developing a universal analysis method and representing any type of input signal with a certain model, such as multi-tone representation and modeling, simplify the analysis and design of these systems enabling initial rapid optimizations and understanding of the system performance. In this...
Diversity Analysis of Hierarchical Modulation in Wireless Relay Networks Yalcyn, Ahmet Zahid; Yüksel Turgut, Ayşe Melda (2014-07-01) In communication systems, hierarchical modulation is used to increase system robustness and to send different information flows simultaneously. However, when used in cooperative communication systems, hierarchical modulation is prone to error propagation, which is the most important problem that prevents the achievement of full diversity gains. Depending on the signal-to-noise ratio between the source and the relay, threshold digital relaying can be used to mitigate error propagation. Mitigating error propa...
Diversity Analysis of Hierarchical Modulation in Cooperative Communication Yalcin, Ahmet Zahid; Yüksel Turgut, Ayşe Melda (2014-01-01) In cooperative communication systems, hierarchical modulation is used to increase systems robustness and to send different information flows simultaneously. In cooperative communication systems which use hierarchical modulation, error propagation is the most important problem that prevents achieving full diversity gain. Thresholds that depend on the signal to noise ratio (SNR) value between the source and the relay can be used to mitigate error propagation. If the instantaneous SNR between the source and th...
Energy efficient wireless unicast routing alternatives for machine-to-machine networks Tekbiyik, Neyre; Uysal, Elif (Elsevier BV, 2011-09-01) Machine-to-machine (M2M) communications is a new and rapidly developing technology for large-scale networking of devices without dependence on human interaction. Energy efficiency is one of the important design objectives for machine-to-machine network architectures that often contain multihop wireless subnetworks. Constructing energy-efficient routes for sending data through such networks is important not only for the longevity of the nodes which typically depend on battery energy, but also for achieving a...

Citation Formats

M. E. Topaloğlu, “Improving Kernel performance for network sniffing,” M.S. - Master of Science, Middle East Technical University, 2003.