Research And Design On Networktraffic Identification And Control System

The rapid development of the Internet fundamentally changed people's life,the early network is only used in scientific research and military communication,and with the development of technology and the popularization of electronic equipment,ordinary people can use the Internet to text chat,send and receive E-mail,browse web,etc.,nowadays,we use the Internet shopping,taking taxi,reading,watching video,booking meal and tickets and hotel,the Internet has seep into every aspect of our lives.At the same time,the Internet has greatly promoted the progress of the society,Information and technology spread more efficient,Internet companies such as Google,Facebook has created a business miracle after another.Due to society's growing dependence on the Internet,how to ensure the reliable and security of the network is a problem the network operators and Internet enterprises must solved.Network traffic identification and control technology could make the network traffic be visualized controlled,discover the network congestion,it also has good prevention effect of malicious attacks network traffic.On the other hand,the development of the Internet industry has begun to transition from quantitative development to the qualitative development.Network operators can analyze user Internet behavior and habits through the network traffic identification and control technology,grasping the user preferences,so that they to offer their users personalized service.In this paper,first in-depth study existing traffic identification and control technologies,and compared the advantages and disadvantages of all kinds of technology,then analyzed the common network traffic HTTP,P2P,VoIP,and according to the flow characteristics of them designed corresponding identification scheme.Based on this study and designing,designed a network traffic identification and control system that mainly based on Deep Packet Inspection,supplemented with port recognition and Deep Flow Inspection,identifying the network traffic by the traffic sign system based on the application layer,and controlling the network traffic by netfilter/iptables framework.At last of this paper,some typical application software has been chased to teste the system and test results are given.The main work of this paper include the following aspects:1.In-depthresearched and analyzed the common network traffic HTTP,P2P,VoIP,summarized their flow characteristics,designed traffic identification scheme for each traffic with combining the popular network traffic identification technology.2.Designed a network traffic identification and control system that mainly based on Deep Packet Inspection,supplemented with port recognition and Deep Flow Inspection.design the system's framework and expound the function of some important module in detail:the database module,the feature database module,flow Pre-Processing module,flow identification module,and the flow control module.3.According to the laboratory network environment,designed corresponding deployment scheme for the network traffic identification and control system,and selected some representative application software tested the performance,and the recognition and control function of the system,the test results show that the system has reached the expected effect.