Design And Implementation Of Network Routing Anomaly Monitoring System

At present, routing protocol common used under inter-domain or intra-domain routing system is BGP or OSPF protocol respectively. The widely used of these two protocols, proves that their routing ability is nearly impeccable. But it is hard to set complex security measures for routing protocols in order to get more efficient routing ability. Under this status, the network routing anomaly monitoring become a powerful measure to ensure the safety of network routing system.Generally, design of routing anomaly monitoring system should work around the analysis of protocol packets under the control plane, and the reachability detection of targets under the data plane. However, for routing anomaly monitoring using detecting messages under the data plane, whether it's purely based on the detection of data plane, or a combination of control plane detection results which could make the detection temperate and purposive, it is inevitably to cause certain burden to the target network because of the existence of detection messages.After a brief introduction of OSPF and BGP protocol, and an analysis of the current common routing anomaly, and combined with the present status of research on the routing anomaly monitoring, this paper decides to abandon the detection manner, design and implement a network routing anomaly monitoring system based on control plane only.Implementation of this system based on the premise of reducing the network burden as far as possible, the main research contents have closely related with the design and implementation of such function as routing data collection, analysis of network topology, and routing anomaly detection. On the data collection, using passive method to collect protocol messages, by the way, this method is to build interaction between the software simulation and hardware real routers. On topology analysis, through the acquisition of the UPDATE messages and LSU messages, BGP and OSPF network topology can be analysed respectively,and based on analysis of these two kinds of results, an entire topology of the target network will be concluded. On anomaly detection, by using an optimization scheme based on target network model, the system has got a certain promotion on monitoring effect and scalability aspects, and also reduced the lack of detecting accuracy of using control plane based only.In addition, the realization of this system based on the typical inter-domain (BGP), intra-domain (OSPF) protocol, can monitor inter-domain and intra-domain routing system at the same time, and make a certain correlation analysis in some anomaly detection. Finally, this paper has done the relevant tests on the various functions of the system,through testing found that system could make network topology analysis correctly, and complete the specified routing anomaly monitoring function.