Endace DAG 4.3GE, Руководство пользователя

Страница: 31 / 43

Endace Measurement Systems Ltd EDM01.05-01r1 DAG 4.3GE Card User Manual
www.endace.com
5.3.2 Inline Forwarding
Description The DAG 4.3GE card can be used as an 'inline' device to receive, inspect,
filter and forward packets between Port A and Port B.
Process
The following information describes the DAG 4.3GE card inline forwarding
process.
Process Description
Inline transmission. This operation can be performed at 100% line
rate in both directions simultaneously. A PCI-X
133MHz slot is required for full performance
and the performance may be limited by the host
PC CPU and memory performance.
The 'dagfwddemo'
program. The 'dagfwddemo' program is provided as a
demonstration of how this can be achieved. This
program forwards packets bidirectionally,
applying a user supplied BPF filter to each
packet with the host CPU. Packets which match
the filter are forwarded, while packets that do
not match are dropped.
Modification of
packets. Modification of packets during inspection is
also possible. The modifications should not
change the length of the packet, and the user is
responsible for re-computing checksums as
needed.
This is intended a demonstration of Inline
Forwarding technology for use in Firewall or
IDS/IPS applications. It is not suitable for use as
a production Firewall.
Copyright© All rights reserved
26
Revision 6. 22 September 2005.