Performance characteristics of the kercap kernel driver engine
《Netbai Web Monitor》is the latest monitoring software launched by Shanghai Netbai Information Technology Co., Ltd. It integrates network monitoring, security auditing, email monitoring, chat monitoring and other functions, making it a monitoring software leading the industry by over a year.
Performance characteristics of the kercap kernel driver engine
The powerful features and excellent performance demonstrated by 《Netbai Web Monitor》are largely due to its kernel packet capture driver engine, kercap. As the core technology of the product, the stable and efficient kercap kernel packet capture driver engine is a strong guarantee for the high performance of 《Netbai Web Monitor》. It also enables 《Netbai Web Monitor》to handle complex Internet management functions with ease under high traffic conditions. The kercap kernel packet capture driver engine is a self-developed Windows kernel driver program by Shanghai Netbai Information Technology Co., Ltd., reaching world-leading levels. The kercap kernel packet capture engine implemented using IMD technology has significant advantages in stability, compatibility, and security compared to other technical implementations. After extensive testing and continuous optimization by Shanghai Netbai Information Technology Co., Ltd., the packet capture speed and stability of the kercap kernel engine have improved dramatically. The company's pursuit of excellence in this system has resulted in outstanding performance that stands out from the rest.
1. High-efficiency packet capture
kercap uses a two-level support cache in packet capture processing, greatly enhancing packet capture performance. Its packet capture speed reaches line rate on a 100 Mbps network and can reach 900 Mbps on a gigabit network. Moreover, the design fundamentally solves the problem of packet loss during network packet capture.
2. High packet capture stability
kercap analyzes packets directly in the kernel, with clever algorithms and meticulous processing significantly reducing CPU usage. Under the same traffic load, its CPU usage is far less than one-tenth of the commonly used packet capture program WinPcap on the market. The extremely low consumption of system resources ensures the high stability of the kercap packet capture program.
3. High compatibility of the packet capture program
The kercap packet capture program not only supports virtual NIC packet capture but also supports multi-NIC packet capture. The extremely high compatibility of kercap ensures that it can work normally in various different network environments.
4. High security of the packet capture program
The kercap packet capture program fully considers the impact of various network environments on the kernel packet capture program, adding security detection functions and fault tolerance mechanisms to ensure the normal operation of the packet capture program. Compared to many similar open-source code software, it has extremely high security.