Research On Network Traffic Measurement System Based On Flow

"Triple-play" refers to the telecommunications network, computer network, cablenetwork integration operations. That is integration and penetration of traditionaltelecommunications networks, computer networks, and television network. Thepromotion of "triple-play" applications provides a strong support for the integrationand competition of our existing network resources. In order to meet the requirementsof digital TV interactive services and data communication business and to improveradio and television network competitiveness in the "triple-play" business. The SVAGroup is usually to transform the existing individual HFC network and establishtwo-way IP-based network system. This paper, which takes Hunan BroadcastingGroup’s two-way network transformation project as the background, studies the trafficmanagement technology and development for management system.Traffic management is an important part of network performance management.In the IP network, the traditional traffic management uses SNMP. SNMP uses the data,which are collected based on port, to analyze network traffic and device performance.However, SNMP can not use these data to obtain end to end traffic informationaccurately, so traffic composition problem can not be solved. In order to solve thetraffic distribution and composition problems，this paper uses Flow-based networktraffic technology to monitor different levels of traffic in-depth.As to the traffic collection, this paper, based on research and analysis of SNMP,Flow.etc traffic collection technology, proposes a multi-mode flow collection mode.For those networks providing NetFlow, sFlow and other private flow output, thispaper uses corresponding Flow receiving components, such as NetFlow receivingcomponents and sFlow receiving components, to collect data. But for those networksnot providing private flow output, this paper uses Libpcap to collect data which arepackage-lever.As to the traffic analysis, this paper summarizes the TCP/IP network structureand the traffic analysis principle under this structure. By the definition of Flow, thisrefers to all the packages with the same source and destination addresses, the paper implements the traffic process analysis about NetFlow and other private flow data.Then by studying a variety of packet classification algorithms, the paper proposeshash algorithm based on the Flow. With the traditional hash algorithm as thefoundation, the algorithm uses the local theory of flow to implement the quick shunton package. During design and implement, the paper includes the design on hashalgorithm based on Flow and on data processing method.Based on the research of the network traffic collection and analysis technologyabove, this paper, using C as the development language, implements the networktraffic analysis system based on Flow. The system adopts B/S structure, and mainlyincludes the traffic collection module, the traffic analysis module.etc. Among them,the traffic collection module is responsible for data acquisition according to differentnetwork environment, and the traffic analysis module is responsible for the shunt andstatistical analysis of traffic. Though system testing and commissioning, this systemcan complete the statistical analysis of network traffic accurately.