Research On Key Technology Of High Performance Network Protocol Analysis And Output

Packet parsing is a commonly used method of network traffic analysis in the Internet.However,the existing network traffic analysis system has a fixed analytical format and a single data format,which makes it difficult to meet the needs of different users.In view of the different needs of different environments in this issue,this paper presents the concept of custom output,that is,the order of output data,format,the number of custom.The user can customize the output format of traffic analysis according to customized rules and adapt to each environment.To achieve a customized system,you need to solve the following problems:how the user to communicate with the system,the system how to parse the content and data formats need to customize the implementation.Through the access to the data and experimental comparison,this paper proposes and realizes the solutions to these problems:by customizing the simple and practical grammar rules,the user is able to communicate the idea to the system.Through the analysis engine for the grammar,the system can Understand the user's idea;also proposed to rely on the protocol tree way to customize the message parsing,and verify its feasibility;finally proposed the concept of field processing methods,with custom syntax,the data can be carried out by any method deal with.And this article also repeated scrutiny of various details or performance comparison,the system as a whole more efficient.The network traffic analysis and output system can work in the local area network environment,can generate real-time traffic information in the LAN,the output data with the data analysis system can capture real-time local users and dynamic information such as valuable information.