Key Technology Research Of Network Probe For Traffic Monitoring

Network traffic monitoring is one of the important prerequisites of traffic accounting, network management, attack detection or alarm, and network design. Network probe provides accurate, integrate traffic for it.With the expansion of network size and the increase of the link speed, network probe faces many challenges, such as huge data scale, high packets arrival speed, low statistic precision etc.. In addition, next generation network management system trends to be service oriented, and network probe as an end system of it provides traffic monitoring service. The category of the existing network probes currently is numerous, but many weaknesses such as high spending, difficult to deploy and dependent on specific network or devices still exist. So it is great important to implement a network probe which can provide high-speed processing, also be cheap and suitable for service issue.To solve the problems of the implementation of current network traffic monitoring, this thesis studied the network traffic statistics technology, network probe implementation technology and WSDM service implementation technology, focused on the key implementation technology of network probe, and then proposed a network monitoring service framework. Besides, the thesis designed the function modules in detail, and proposed a deploy scheme of network monitoring service. More specifically, this thesis includes the following contents:[1]. A secure network traffic statistics method was proposed. It solved the problems of how to select the nodes to deploy the network probes, and information leaking existing in service- oriented network traffic statistics.[2]. A large flow identification and statistics algorithm was proposed. The algorithm can precisely identify and account the large flows which influence the network prominently.[3]. The key modules of probe such as protocol analysis module, traffic accounting module, large flow identification and statistics module were designed.[4]. An implementation of probe's network monitoring services, including the environment setting, the processing of service issue and the interface description of WSDM.[5]. The framework of the probe's network traffic monitoring service was composed. It includes the three levels of network monitoring service implementation and the introduction of the probe service architecture.[6]. The network monitoring service of the probe was evaluated and tested.