{"id":32586,"date":"2019-10-31T21:47:51","date_gmt":"2019-10-31T18:47:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp\/"},"modified":"2019-10-31T21:47:51","modified_gmt":"2019-10-31T18:47:51","slug":"kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","title":{"rendered":"L'azienda Cloudflare ha pubblicato xdpcap, un analysatore di traffico basato sul sottosistema XDP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cloudflare ha presentato<\/a><\/noindex> progetto aperto xdpcap<\/a><\/noindex>, nell'ambito del quale si sviluppa un analizzatore di pacchetti di rete simile a tcpdump, costruito sulla base del sistema XDP<\/a><\/noindex> (eXpress Data Path). Il codice del progetto \u00e8 scritto in linguaggio Go e distribuito<\/a><\/noindex> \u00e8 sotto licenza BSD. Il progetto include anche \u00e8 stata preparata<\/a><\/noindex> una libreria per il binding degli handler eBPF del traffico da applicazioni scritte in Go.<\/p>\n

L'utilit\u00e0 xdpcap \u00e8 compatibile con le espressioni di filtraggio tcpdump\/libpcap e consente di elaborare su quell'hardware volumi di traffico significativamente maggiori. Xdpcap pu\u00f2 essere utilizzato anche per il debugging in situazioni in cui tcpdump normale non \u00e8 applicabile, ad esempio quando vengono utilizzati sistemi di filtraggio, protezione da attacchi DoS e bilanciamento del carico, che impiegano il sottosistema del kernel Linux XDP, elaborando i pacchetti in fase precedente alla loro elaborazione nel stack di rete del kernel Linux (tcpdump non vede pacchetti scartati dal gestore XDP).<\/p>\n

Le elevate prestazioni sono ottenute grazie all'uso dei sottosistemi eBPF e XDP. eBPF \u00e8 un interpretatore di bytecode integrato nel kernel di Linux, che consente di creare gestori ad alte prestazioni per pacchetti in entrata e in uscita, prendendo decisioni sul loro reindirizzamento o scarto. Con l'aiuto del compilatore JIT, il bytecode eBPF viene tradotto al volo in istruzioni macchina ed eseguito con prestazioni paragonabili a quelle del codice nativo. Il sottosistema XDP (eXpress Data Path) integra eBPF con la capacit\u00e0 di eseguire programmi BPF a livello del driver di rete, supportando l'accesso diretto ai buffer DMA dei pacchetti e operando nella fase precedente all'assegnazione del buffer skbuff dallo stack di rete.<\/p>\n

Come tcpdump, l'utilit\u00e0 xdpcap traduce inizialmente le regole di filtraggio del traffico ad alto livello nella rappresentazione classica BPF (cBPF) utilizzando la libreria standard libpcap, per poi convertirle nella forma di sotto-programmi eBPF, impiegando il compilatore. cbpfc<\/a><\/noindex>, utilizzando le funzionalit\u00e0 di LLVM\/Clang. In output, le informazioni sul traffico vengono salvate in formato standard pcap, permettendo l'uso del dump di traffico preparato in xdpcap per un'analisi successiva in tcpdump e altri analizzatori di traffico esistenti. Ad esempio, per catturare informazioni sul traffico DNS, invece del comando \u00abtcpdump ip and udp port 53\u00bb, si pu\u00f2 avviare \u00abxdpcap \/path\/to\/hook capture.pcap 'ip and udp port 53'\u00bb, dopodich\u00e9 si pu\u00f2 utilizzare il file capture.pcap, ad esempio con il comando \u00abtcpdump -r\u00bb o in Wireshark.<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 xdpcap, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0445\u043e\u0436\u0438\u0439 \u043d\u0430 tcpdump \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP (eXpress Data Path). \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0434\u043b\u044f \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 eBPF-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go. \u0423\u0442\u0438\u043b\u0438\u0442\u0430 xdpcap \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u0430 \u0441 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 tcpdump\/libpcap […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32586","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47L'azienda Cloudflare ha pubblicato xdpcap, un analizzatore di traffico basato sul sistema XDP | ProHoster","description":"L'azienda Cloudflare ha presentato un progetto open source","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 xdpcap, \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:47:51+00:00","article:modified_time":"2019-10-31T18:47:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32586","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 11:37:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:56:29","updated":"2026-01-21 11:37:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/32586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=32586"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/32586\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=32586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=32586"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=32586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}