Based On The Ndis Network Traffic, High-speed Detection And Analysis System

With the fast evolution of Internet, improvement of performance is required. People also need high QoS (Quality of Service) and sufficient security guarantee. And it is important to master the behavior of IP network for reaserch and development of network device and protocols, thus, the research on network measurement is paid more attention. The final object of this paper is to give a better software system to inspect and analyse network.At first, it presents network measurement from several aspects, such as the actuality, the significance and key technologies of network measurement. Then the passive measurement and related key technologies are discussed in-depthly, including high performance packet capture technology, high speed flow classification technology and high speed flow track technology. The measurement and statistic ways of some parameters in passive mode are also gived by this thesis. With packet driver in NDIS programming, this paper reflects an original model of passive measurement system RPPM (Real-time Passive Performance Measurement), explains the structure in detail and describes the concrete implement. At last, it raises the problems which need to be improved in the future.