Research And Implementation Of Network Traffic Analysis

Network traffic is a measurement of data exchange among nodes in network and it can be used as a basis for evaluating network running status.When administrators maintain the network,they can determine whether anomalies occur in network and make an assessment of network by analyzing network traffic and grasping the network traffic pattern.A network traffic analysis system,which is suitable for the network with a switch as core equipment,is designed in this paper.The system is divided into three parts-Collector,Analyzer and User Interface.In the Collector's design,port mirroring method is used to collect network packets,and zero-copy technology is used to optimize the Collector's process of receiving network packet,so unnecessary CPU time is reduced;in the design of analyzer,this paper presents a shared memory management method,which includes lock-free data synchronization method and a TCP flows combination method.The system takes on-line test and the results show desired goal is achieved.As the system uses bypass technology to achieve network data acquisition,the system does not affect the normal operation of any nodes in the same network.