A Distributed Internet Monitor System Based On Linux

Although Internet applications are greatly grown, the technologies about computer management, network-communication, resource sharing are not improved accordingly. Thus, effective method to protect the security of network is an important research task in network security field. There are some kinds of security products, but they cannot meet the need of Internet evolution.Internet Monitor System is a new kind of network security product. This paper puts forward a design of Internet Monitor System based on Linux to meet the demands of real-time and high-efficiency. Real-time performance of the monitor host is enhanced using the multi-process, multithread, priority provided by Linux. Meanwhile, the performance of the system is improved by distributed data processing based on multiple monitor hosts. Its advantage of efficiency, security and scalability is verified by experiments.The system adopts the layer-dividing method in whole. The main idea is to divide the system into three layers and to set up the databases or local files between layers as interface. The first layer implements Internet packet intercepting and assembling according to TCP link; the middle layer is used to depress, decode the raw files, and to take the full-text researching; the up layer provides the user interface based on there-tier structure. In addition, authentication and authorization mechanism are provide in client side of the system as well as the encryption mechanism based on SSL.