Research And Implementation Of Extensible Flow Information Export System Based On IPFIX

With the IP network bandwidth increasing and the continued rapid growth of traffic, the difficulty and complexity of network traffic monitoring become higher and higher, and the traditional accurate real-time IP-based network traffic monitoring technology can no longer meet the requirements. In order to protect and enhance the quality of service of existing networks to establish high available IP network, we must understand the behavioral models such as use intensity, frequency, flow of the network bearer services, and then find the new Internet application development trends. On the other hand we should diagnostically analyse the network traffic and monitor the abnormal traffic and attacks of network to improve the network security.This thesis is based on project that is data set generation technology research based on data flow payback and annotation. Critical technology and implementation of extensive flow information export system based on the IPFIX protocol are discussed in the thesis. Many problems such as flow-based network traffic monitoring packet loss, application layer information miss and flow format fixed are resolved in the thesis.The first part of the thesis is exordium. In the second part of the thesis the author introduces the basic concepts of network measurement and IPFIX. In the third part, the author describes the system structure of the extensive flow export system and respectively introduces its four modules which are data packet capture module, packet parsing module, data flow generation module, flow export module and flow parsing module. Flow generation module is detailed in the fourth part including the specific design and implementation of the module. The flow generation module is composed of various sub-function modules. The function, usage and implementation of each sub-function module are discussed in the fifth part. The author also describes the functional test of the system and the result of test shows that the system can achieve the desired purpose. Conclusion and prospect of research are given in the end.