Network Traffic Monitoring System

With the wideband Internet swiftly developed in China, the network of Changchun telecom expanse in the size and the structure of that is becoming complex. In order to better serve corporate customers and in a timely manner to understand their own load network conditions and the important business of the bandwidth occupancy rate, and accurately measure the international and domestic carriers, the backbone / Metro Communications flow and the type of business; proper planning and assessment of the network expansion, upgrading and so on, it is necessary for company wo analyze the flow of the network and relative service timely and accurately.The operation and maintenance department that is responsible on the flow of network management has not fully meet the above requirements management and network operations and the flow of traffic analysis system. At present, the network management system is also used a number of general-purpose network monitoring software usage link, such as MRTG or RMON probe the use of the installation of RMON I / II agreement on the part of the network ports for network traffic and monitor and collect the flow of top business. But the two ways that have been widely used by the network traffic analysis system has its own significant technical limitation. It is urgent for company to find a feature-rich, mature and stable technology to perfect and update the existing management system in the management of information collection and analysis of the way. The new technology systems should meet that it has a small impact on the operator's network and will be able to carry out a smooth upgrade without topology ,and it also can collect, statistic and analyze the different types of service information from different lines. On the side, it should adapt the actual situation in china that is the rapid expansion of the network size, rapid growth in bandwidth link, and according to the demand for a certain use of the data collection function of the sample or model of the raw data collected automatically gathered way to reduce the pressure of data processing.The monitoring system of the network flow witch is design in this article has meet these requirement, and witch contains the management and analysis of port flow, the analysis of flow and the strange flow. It requires the adoption of the network's overall business data flow analysis and can accurately understand the current state of network traffic, the network's overall business situation, and other operations. The cost clearing and sharing depend on the data of flow. Through the statistic the flow of interoperability, cities, the international export, it can provide accurate data to support network for sharing and clearing cost. Through a long time analysis and statistic the flow , it can find the growth trend in different parts of the business, and it can depend on these data to update the network device and use network resources reasonably. It should detect timely the network attacks incursions or unusual equipment. On-line data flow has its own laws, regardless of peak or low flow has its reasonable limits, any time the flow of conflict or dump or show that the abnormal operation of the network, such as large The size of the network to attack or invade, network equipment failure or unstable, and so on..The article take the technology of Netflow to test and statistic the data witch is flowing the device of the network., witch is the standard that is considered as the most important IP/MPLS flow analysis, statistics and billing, witch provides the module analysis and measurement for the flow of network and the detail data of network operation.The system takes the function of data collection, and can collect the data on routers, switches and servers.The flow analysis function module contains the detection of device operation, witch provides the wide information about network detected, the detection of port flow, witch can detect the best flow-in, the flow-out, and the average flow. The statistic and analysis of the device port flow can statistic the flow of port according to the daily, weekly, monthly and yearly.System traffic flow analysis module of the main functions include: analysis of the business flow through to users such as the flow of traffic statistics and analysis, can provide users with better services, we can get used to different types of users, the users use of network resources.The analysis of interactive link contains the trend analysis and the flow ranking and it can provide the flow trend among the domestic operators and rank their flow in the jilin province. The flow analysis contains the all net analysis, and the distribution of total flow on jilin province. The national export flow analysis analyze the operators and the export flow trend. Inter-provincial operation analysis, the operator of telecommunications and inter-provincial branch of the statistical analysis of traffic trends; the province flow analysis, operator of the mainland city of traffic trends for statistical analysis.System monitoring and analysis of the abnormal flow of the main function modules, including small data package behavior, when the data flow in the imbalance between the number of witch, possible attacks the network, and the results of the analysis are given warning. Tunisia dump or flow behavior analysis:For the sudden changes in traffic, each device will have a number of custom alarm conditions. Network monitoring:some of the network topology monitoring and management software exist in the system. When there is a need to display abnormal flow of the entire network topology, the warning message will be correlation topological map shows that through the different colors of the logo warning network unit.The system provides the interface with other systems, such as net management system, decision analysis system, and the third program.The entire system design and implementation of the basic design meets the initial demand. The results of on line running reflect the effectiveness of the system. But the system should provide the better way of data sampling and automatic aggregation of raw data and stronger capacity of data analysis.