{"id":32586,"date":"2019-10-31T21:47:51","date_gmt":"2019-10-31T18:47:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp\/"},"modified":"2019-10-31T21:47:51","modified_gmt":"2019-10-31T18:47:51","slug":"kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","title":{"rendered":"La soci\u00e9t\u00e9 Cloudflare a publi\u00e9 xdpcap, un analyseur de trafic bas\u00e9 sur le sous-syst\u00e8me XDP.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

La soci\u00e9t\u00e9 Cloudflare pr\u00e9sent\u00e9e<\/a><\/noindex> projet open source xdpcap<\/a><\/noindex>, dans le cadre duquel se d\u00e9veloppe un analyseur de paquets r\u00e9seau semblable \u00e0 tcpdump, construit sur la base du sous-syst\u00e8me XDP<\/a><\/noindex> (eXpress Data Path). Le code du projet est \u00e9crit en langage Go et est distribu\u00e9<\/a><\/noindex> sous licence BSD. Le projet comprend \u00e9galement pr\u00e9par\u00e9e<\/a><\/noindex> une biblioth\u00e8que pour lier les gestionnaires de trafic eBPF \u00e0 partir d'applications en langage Go.<\/p>\n

L'outil xdpcap est compatible avec les expressions de filtrage tcpdump\/libpcap et permet de traiter des volumes de trafic consid\u00e9rablement plus importants sur le m\u00eame mat\u00e9riel. Xdpcap peut \u00e9galement \u00eatre utilis\u00e9 pour le d\u00e9bogage dans des conditions o\u00f9 tcpdump traditionnel est inapplicable, par exemple, lorsqu'il existe des syst\u00e8mes de filtrage, de protection contre les attaques DDoS et d'\u00e9quilibrage de charge utilisant le sous-syst\u00e8me XDP du noyau Linux, qui traite les paquets avant leur traitement par la pile r\u00e9seau du noyau Linux (tcpdump ne voit pas les paquets rejet\u00e9s par le gestionnaire XDP).<\/p>\n

Des performances \u00e9lev\u00e9es sont obtenues gr\u00e2ce \u00e0 l'utilisation des sous-syst\u00e8mes eBPF et XDP. eBPF est un interpr\u00e9teur de bytecode int\u00e9gr\u00e9 au noyau Linux, permettant de cr\u00e9er des gestionnaires tr\u00e8s performants pour les paquets entrants\/sortants tout en prenant des d\u00e9cisions sur leur redirection ou leur rejet. Gr\u00e2ce au compilateur JIT, le bytecode eBPF est traduit \u00e0 la vol\u00e9e en instructions machine et ex\u00e9cut\u00e9 avec des performances de code natif. Le sous-syst\u00e8me XDP (eXpress Data Path) compl\u00e8te eBPF en permettant d'ex\u00e9cuter des programmes BPF au niveau du pilote r\u00e9seau, avec un acc\u00e8s direct au buffer DMA des paquets et un fonctionnement avant l'allocation de buffers skbuff par la pile r\u00e9seau.<\/p>\n

Tout comme tcpdump, l'outil xdpcap traduit d'abord des r\u00e8gles de filtrage de trafic de haut niveau en repr\u00e9sentation classique BPF (cBPF) \u00e0 l'aide de la biblioth\u00e8que libpcap standard, puis les transforme en forme de sous-programmes eBPF en utilisant le compilateur cbpfc<\/a><\/noindex>, utilisant les travaux de LLVM\/Clang. Les informations sur le trafic sont enregistr\u00e9es au format standard pcap, ce qui permet d'utiliser le fichier de capture de trafic pr\u00e9par\u00e9 dans xdpcap pour une analyse ult\u00e9rieure avec tcpdump et d'autres analyseurs de trafic existants. Par exemple, pour capturer des informations sur le trafic DNS, au lieu de la commande \u00abtcpdump ip and udp port 53\u00bb, vous pouvez ex\u00e9cuter \u00abxdpcap \/path\/to\/hook capture.pcap 'ip and udp port 53'\u00bb, puis utiliser le fichier capture.pcap, par exemple avec la commande \u00abtcpdump -r\u00bb ou dans Wireshark.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 xdpcap, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0445\u043e\u0436\u0438\u0439 \u043d\u0430 tcpdump \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP (eXpress Data Path). \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0434\u043b\u044f \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 eBPF-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go. \u0423\u0442\u0438\u043b\u0438\u0442\u0430 xdpcap \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u0430 \u0441 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 tcpdump\/libpcap […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32586","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47La soci\u00e9t\u00e9 Cloudflare a publi\u00e9 xdpcap, un analyseur de trafic bas\u00e9 sur le sous-syst\u00e8me XDP | ProHoster","description":"La soci\u00e9t\u00e9 Cloudflare a pr\u00e9sent\u00e9 un projet open source","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 xdpcap, \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:47:51+00:00","article:modified_time":"2019-10-31T18:47:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32586","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 11:37:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:56:29","updated":"2026-01-21 11:37:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/32586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=32586"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/32586\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=32586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=32586"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=32586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}