The Research And Design On Network Traffic Inspection System

With the ongoing increase of network speed, extension of scale and diversity of application demands, the data flow becomes complex and changeable. All those posed higher and newer requirements on the management, security and maintenance of network. Network management software, firewall and monitoring systems, etc all require the packet collection and packet classification in high speed. The implement methods of data collection and classification can be categorized into hardware and software ones by and large. As for the application of the small-scaled and low speed network, the hardware one is usually expensive and in long term, where as the software one avoids all those shortcomings. This dissertation basing on the development of flow monitoring system, lucubrate the flow monitoring system with integrative functions by purely using of software.This dissertation firstly analyzed the significance of the research of the network flow monitoring, and carefully researches the mode of real-time network flow measurement. Basing on those studies, this thesis summarizes two key problems: high-speed network packet capture technology. Multidimensional packet classification algorithm respectively. After that, the dissertation focuses on the solutions to the two problems. This solutions includes using WinPcap technology as packet capture mothod, NCHTSS (Non-Collision Hash Tuple Space Search) as packet classification algorithm. After having researched and implemented those key functions, this dissertation proposes the general design, implementation of flow monitoring system.