The IP Network Traffic Analysis And Monitoring Of Abnormal Flow

In this paper, I participate in the construction of the Beijing Netcom launched by the end of 2006 of the "Beijing local IP network traffic analysis system construction" project implementation plan and data analysis. In the building before the traffic analysis system, Beijing Netcom does not have comprehensive traffic analysis and abnormal flow monitoring system, in particular, faced security incidents, only through EMAIL, telephone communication, temporary increase in security strategy, and so do the original means of dealing with abnormal flow, Lack of initiative to discover and deal with the problem means more users can not know where the traffic flows, and how specific online behavior. To stand on the operator's point of view and the overall analysis of network traffic flows, and the abnormal network traffic for effective monitoring, we have adopted NETFLOW Construction of the traffic analysis module and abnormal flow of cleaning module, and other special select the node (the node whether the On the conditions and equipment capacity, and so many conditions) Construction of a "joint application of the monitoring module", so as to the level of network traffic to a more detailed analysis.This paper describes the system construction of the three modules that traffic analysis module, the abnormal flow of modules and application-level traffic monitoring module components and related technology to meet the goal of building projects developed a detailed design of the deployment of the programme, And focus on the use of the system after the deployment of the module on the flow of network traffic flow, user behavior and network components, such as the contents of the actual operating results detailed data analysis, testing, certification and deployment of the system composed of the effectiveness of the network and its Operation Optimized to provide a relevant basis for decision-making, and Beijing Netcom past only through the simple lines of network bandwidth utilization and expansion of the method, provided a more abundant and scientific decision-making tools.