Research And Implementation On Application Layer Network Traffic Monitoring System Based On DPI And DFI

With the rapid development of network technology, information communication changesfrom low bandwidth business such as file transfer, News, E-mail and BBS to high bandwidthbusiness such as telephone, video and pictures online. Network welcome the day of text erainto the multimedia era. Meanwhile, business type and application number is growing, so thatthe required bandwidth grew exponentially than before and resulting in network bandwidthresources increasingly tense. Moreover, with the rise of new business, such as e-commerce,e-cash, digital cash, network bank. Internet content security is becoming more and moreserious. Enterprise Web-based applications also grew rapidly. As enterprise network scaleincreasing with the expanding of enterprises scale, enterprises need strict constraints oninternal network and external network. These problems need to be solved urgently forinformation-based society. At present, to monitor the network traffic is one of the importantmethods. How to design a system to provide enterprise-level application layer trafficmonitoring system in high-speed network environments is the main task of this paper.This article design and implement a traffic monitoring system after research and analysistraffic identification technology and traffic control technology. The work of this articleprimarily covers as below:(1) Established the position of the system according to the current network environmentand analyze the traffic monitoring equipment on the market and the current achievements inthe field of traffic monitoring technology,.(2) After delving into the technical---traffic identification technology and traffic controltechnology. Research and design the design objectives, system architecture andmodule-specific implementations of the system, and the network deployment scheme ispresented.(3) In view of the current problem of single use software to realize detection methodcannot solve the real-time under the high-speed environment, the paper put forward a methodof hardware and software state machine, combined with figure mechanism to accelerate thesystem. Research and implement the application layer flow control module through the wayof manual and automatic based on the strategy library. (4) Test the application layer network traffic monitoring system from throughput andaccuracy performance indexes and block and current limiting function indexes. Points out theclear direction for the future research work.The paper implements traffic monitoring system under the high speed of networkenvironment based on the state machine in combination with software and hardware. Thissystem has reached the system indexes. This system also has a lot of shortcomings, in theinterface optimization, feature extraction, flow collection, pretreatment and flow controlalgorithm and so on. These can be researched in the future.