Design Of Traffic Monitoring System For IPv4/IPv6 Campus Network

With the rapid development of Internet technology, different kinds of applications and services (such as VOD, P2P, etc.) are emerging continully, which does not only increase network traffic, but also bring some potential safety hazard to the Internet. These problems make the traffic monitoring of network face new challenges. At the same time, the shortage of IPv4 address is becoming more and more serious, which hinders the development of IP technology. To meet the growing needs of Internet access and QoS of users, IPv6 are proposed by IETF. IPv6 with built-in security mechanisms does not only solve the shortage of IP address, but also provides a higher quality of service to users. At present, deployment and applications of IPv6 networks have been carried out in China, but we can not replace IPv4 networks with IPv6 immediately. All this gave birth to a variety of transition technology, dual stack technology, tunnel and NAT technology are three typical kinds of them. The transition technology makes the current network composed of IPv4 and IPv6. At the same time the scale of network increases, network environment becomes more complex. So carrying out traffic monitoring and analysis in the IPv4/IPv6 environment is very meaningful.This paper first introduces the new the characteristics of IPv6 protocol and the major transition technology (dual stack, tunnel, address translation), and then introduces the main methods of network measurement, and finally we design a traffic monitoring system based on the IPv4/IPv6 campus network. The system has five modules:data collection module, network protocol analysis module, data storage module, data display module and server performance monitoring module. We improve the traditional method of packet capture based on Libpcap through PF_RING socket. Network protocol analysis module is based on TCP/IP architecture. In this paper, we focus on the distinction between IPv4 and IPv6, and take into account packets which are encapsulated during the tunnel; and we use the L7-filter's pattern file to match the application layer protocol. Data storage module and the data display module provide users with two kinds of the display:table and linear map. Server performance monitoring module is designed to ensure the stability of the proxy server and further more to make sure the stability of the traffic monitoring system. Finally, the traffic monitoring system is tested in the IPv4/IPv6 network environment built in our laboratory.