Netflow Principle, As Well As Internet Traffic Analysis

Based on network equipment, Lan/Wan Link or host, traditional network surveillance mainly employs SNMP or RMON to monitor performance of host and provide detailed information such as link load, error pocket, time delay, and pocket loss rate etc. However, original network surveillance cannot meet the requirement any more due to the development of network technology and the extension of its application areas.NetFlow technology provides efficient measurement for key Internet applications including network traffic calculation, NetFlow rate based bill, network planning, DdoS monitoring and network monitoring for service providers and enterprise customers.This article makes a thorough analysis on the character of abnormal Internet NetFlow by NetFlow analysis measurement from Internet operator's perspective and proposes Internet backbone traffic supervision technology, which is based on NetFlow technology, and discusses how to adopt protective measures against abnormal Internet NetFlow. It first analyzes the advantages for adopting NetFlow technology to supervise the Internet NetFlow and then describes how to apply NetFlow technology in safe operation of internet backbone.The author has been working in planning, construction and operation of Internet backbone for a long time. From perspective of IP data NetFlow, this article analyzes thoroughly the character of Internet NetFlow, applies the analysis opinions and research result in the following areas: traffic monitor on telecom Internet backbone network, calculation based on traffic amount, intrusion defense, telecom network design & planning etc. The proposed technology is advanced and the research result is practical. This article is valuable reference for whole Internet operation.