Design And Implement Of Network Traffic Statistical Analysis System Based On Winpcap

Nowadays, with the rapid development of network technique, the application on thebasis of internet plays a more and more important role in our life. Subsequently, thenetwork structure becomes more and more complicated, so that people can hardlyunderstand the essence of network, which has brought serious difficulties to networkanalysis. Network traffic statistic analysis system provides a mean of exploring thenetwork characteristics in the acual situations. On this basis, the system also adds thefunctions of business management, which enables business users to have a betterunderstanding of the information from the enterprise. In additon, the B/S structure of thissystem is the most significant character which makes the most different with the others.The statistic analysis of network traffic system can correctly reflect the current networkstatus by using the B/S structure, and it can show not only the current traffic informationaccording to the diagrams, and but also the traffic information in a certain past period.Moreover, this system has a fuction to set rich conditions such as beginning and endingtime, statistical pattern(data package number、byte number), time model, time interval,business application, which allows the users to view real-time monitoring and historysearching in different ways. This system has been tested many times with high load inorder to guarantee the stability and reliability of the B/S system. The functions of businessmanagement of this system can help the enterprise to monitor various kinds of businessstate on their internal network, and consequently can offer help for the administrators ofenterprises to devolop business development directions. The biggest advantage of the B/Sstructure is that there is no need to install systems on every client-side, and as long asthere is a browser, the network traffic statistic analysis can be done.This thesis goes deep into discussion of designing and implementing of the statisticanalysis of network. The thesis has been divided into the following parts. The first is theintroduction of the currently hottest network monitoring techniques; after establishing theway of passive measurement, the capture package tool is selected based on theconsideration of operating system and capture package efficiency, and at last Winpcap ischosen. In order to reduce the risk of losing package as much as possible, this system usesmulti-thread and buffering techniques. Based on the B/S structure, how to transmitinformation from the server to every client-side browser is one of the serious problemsbeing faced. By literature review and feasible testing, finally WebSocket technique of the HTML5is adopted in this system. At the same time, considering the large volume of thedata, database optimization strategy is indispensable. from the perspective of users, themain functions of this system includes real-time traffic monitoring, history query, trafficstatistics, query of flowmeter, query of raw traffic data, service configuration and so on.