Network original message extraction method based on newly added kernel driving module

The invention discloses a network original message extraction method based on a newly added kernel drive module, which provides a new message capture method for a user state process by adding a network message probe module in a Linux kernel and performing customized modification on a Linux kernel network subsystem and a network equipment drive. According to the invention, the function of capturing the network original message is expanded, and the information of the physical network adapter for receiving the network original message is provided. Based on the technology, a network original message data forwarding function based on a physical network adapter device number can be realized on a multi-physical network adapter hardware platform running a Linux operating system, system functions are further expanded, and a low-cost technical solution is provided for network deep customization use, network testing, network fault analysis and the like. 本发明公开了一种基于新增内核驱动模块的网络原始报文提取方法，通过在Linux内核新增网络报文探针模块，并对Linux内核网络子系统及网