市面上中小型防火墙设备的日志管理功能极为有限.为了提高行为记录的效率及功能,设计防火墙软硬件平台,提出基于ARM平台下的Netfiler日志管理技术方案和通信日志收集、发送的流程逻辑思路；调用Linux内核ipt_ULOG模块获取Netfilter数据包处理日志并记录于嵌入式数据库；提出了日志管理的关键函数和嵌入式数据库的设计方法,利用脚本程序处理数据库日志信息并实现远程管理.测试表明:该方案能高效、全面地实现对互联网访问行为的管理；设计方案及研究结果为嵌入式防火墙的行为记录提供了依据.%Small and medium firewall device of the log management function was extremely limited. In order to improve the efficiency and function of behavior records, firewall hardware and software platform were designed. Proposed the logical process of Netfilter log management solution and communication log collecting and sending based on arm platform;Called the ipt_ULOG module of Linux kernel to get the log of Netfilter processing data packets and recorded in the embedded database, proposed the design method of the critical functions of the log management and the embedded database, handled database log information and achieved remote management by script. Tests show: the program could achieve the behavior management of internet access effective and comprehensive. And this results provide a basis for embedded firewall behavior management and the future.
展开▼
