Research On Real-time Network-behavior Monitoring System Of Campus Network

This paper presents a rather perfect solution for the real-time and improved hierarchical network-behavior monitoring system, analysis and describe in detail the function and implementation method of each sub module of the system. With regard to the acquisition mode of network data, the structure of data acquisition combining the sFlow-based acquisition technique with the Packet Capture-based acquisition technique is used. With regard to the analysis of network behaviors, this paper applies the technique of protocol analysis to give an analysis of data to the acquired data packets, so that we can get the detailed traffic information; and the paper applies the method of combining the technique of pattern matching with the technique of protocol analysis to monitor the real-time detection of abnormal behaviors.This system can make the administrator real-time monitor the information on the network behaviors of internal users in the campus network, and give some references for the construction of the campus networks in colleges that become increasingly large in scale and progressively faster in speed.