Design And Implementation Of Internet Traffic Monitoring System

With the rapid development of the Internet,the Internet application layer protocol greatly enriches people’s daily life.A variety of application layer protocol has become the motivation and development characteristic of the Internet.However,the complicated protocols also give the Internet enormous pressure,for instance,P2 P network bandwidth madness,the rise of IM software.Hence,Internet traffic monitoring is imperative.This paper analyzes the current problems of present Internet,introducing the significance of Internet traffic monitoring system,mainstream and well-known open source software products and the direction of the company;discussing several mainstream flow identification technology,such as port detection technology,deep packet inspection and deep flow inspection;summarizing the advantages and found disadvantages;finding the relevant technology to use according to the system design requirements.Meanwhile,it elaborates on Netfilter / Iptables,Netlink principles and mechanisms under Linux OS.The system uses these mechanisms to crawl the Internet packet analysis.In order to achieve accurate identification of protocols,nDPI feature library and open-source API that provides matching rules will be used in this paper to identify Internet traffic.Based on system design requirements,the system is a precise and flexible lightweight traffic monitoring system,and deployed in small LAN exports.The overall design of the whole system is divided into six modules: kernel data acquisition,the user data obtaining,flow matching,statistical,control,LAN monitoring and other functions.The design and implementation are in the Linux operating system.The author designs the testing screen,successfully verifies functionality of the system,tests the system performance,and finally concludes that the system can complete the functionality of the Internet traffic monitoring in a small LAN.