Analysis Of Monitoring System Of National Domain Log Yisualization

Domain name system (DNS) is a kind of a distributed database which makes domain names mapped with EP addresses, and assure the most network application such as HTTP, SMTP, FTP work normally. In recent years, DNS is subject to be the network attack object due to its defects in protocol design and restricted query capacity, including critical infrastructure of network(root name servers and top level name servers), websites,and delegated name servers. Unfortunately DNS monitoring tools can not determine and integrate detail information of DNS attack. Thus the relative system is expected.The main work of thesis includes:(1) This thesis explains the background and significance of this study. The related system and the use of technology are introduced and analyzed associating with the characteristics of the actual demand, including Hadoop technology, MVC design pattern, Web Service and other related technologies.;(2) The national domain log visualization system is analyzed, and its overall design architecture is expounded. The functional requirements of the system includes the visual display of query national domain name system and the use information of top30domain names, source IP and IP port. The overall architecture on the design principles, the system structure, technical proposal, and function model is elaborated;(3) The detailed design and realization of the key module in the national domain analysis log visualization system are presented, including information collection module, data analysis module, the database design and the realization and the MVC design pattern and sub function design and Implementation;(4) The running environment, function test and performance test of the system are introduced and analyzed, and the effectiveness of the system is demonstrated.The national domain log visualization system designed and realized in this paper has now been used. The system can integrate node log information in real time through the deployment of monitoring nodes distributed over China. Furthermore through visual display of webpage, this system can help analysts locate the problems of DNS information and obtain the information of attack characteristics. Since the system was used, it runs stable and achieves the expected design goals.