Design And Implementation Of Linux-based Network Traffic Statistics And Network Access Control System

With the rapid development of the computer technology, network application has already been more popular in the world, and the Internet age has come down. The network has already become an indispensable part in people's daily life, and played a more and more important role in the national economy. However, with the popularization of broadband network, the network traffic becomes more and more crowded. There are many problems which need to be resolved, including managing the network resources effectively, calculating the use of the network resources, supervising the behavior of using the network effectively and avoiding inefficiency in the work and a waste of network resource.This thesis takes the Netfilter/iptables of the Linux firewall as a foundation, uses the configuration tool iptables of the Netfilter to configure the rules, and designs a Network Traffic Statistics and Network Access Control System Based on Linux with the technique of CGI and Apache server, in order to manage and supervise the LAN users. This system is designed with the B/S architecture, and is running on Linux operating system. It mainly implements network traffic statistics, network traffic querying, network access control, connecting to or disconnecting the network, and so on.Firstly, this thesis describes the Linux firewall technology and introduces the Netfilter firewall architecture after Version 2.4 of Linux kernel. Secondly, it discusses the implementation of each module in detail after describing the work flow of this system. The system consists of four modules:user network connecting module, network traffic statistics module, network traffic querying module, and network access control module. In user network connecting module and network traffic querying module the CGI technique is adopted; and in network access control module and network traffic statistics module the iptables and tc tools are applied. Finally, this thesis interprets the testing environment, testing methods and testing results of the system, and describes the prospects of its future work.