Abstract: Frequent interrupt response, redundant data copying and context switching are major factors of impacting network packet capture performance. In order to reduce the impact of these factors, this paper proposes the combination of PF_RING with NAPI. And it is applied to the packet capture process, to overall optimizing the performance. It compares the differences between PF_RING and traditional packet capture mechanism. It analyses the advantages of combination of PF_RING with NAPI. It builds the experimental platform, sending packet in kernel and experimental simulation. In the simulation, it compares with traditional method from the packet capture ratio and processing efficiency. The experiment data shows that the combination of PF_RING with NAPI can effectively improve network packet capture performance.

Key words: zero-copy, packet capture, memory mapping, circular buffer, New Application Program Interface（NAPI）, PF_RING

摘要： 频繁中断响应、冗余的数据拷贝和上下文切换等是影响网络数据包捕获性能的主要因素。为了减少这些因素的影响，提出将PF_RING与NAPI结合应用到捕包过程，以对性能进行整体优化。比较了PF_RING与传统数据包捕获机制的差异，分析了两者结合的优势，搭建实验平台，采用内核发包形式，进行实验仿真。在仿真实验中，从捕包率和处理效率与传统方式进行比较，分析实验数据得出该方法可以有效地提高捕包性能。

关键词: 零拷贝, 数据包捕获, 内存映射, 环状缓冲区, 设备轮询, PF_RING