基于NetFlow的網(wǎng)絡(luò)行為觀測(cè)系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn).pdf

1、東南大學(xué)碩士學(xué)位論文基于Flow的網(wǎng)絡(luò)行為觀測(cè)系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)姓名：湯小波申請(qǐng)學(xué)位級(jí)別：碩士專(zhuān)業(yè)：計(jì)算機(jī)系統(tǒng)結(jié)構(gòu)指導(dǎo)教師：龔儉20080528摘蟄AbstractDesignandImplementationoftheNetworkBehaviorObservationSystemBasedonNetFlowTangXiaobo，GongJianSoutheastUniversityWithrapidgrowthofthescaleof

2、Intemet，thenumberofusers，thediversificationoftheuse，theusershavemoreneedforthequalityoftheservicesoftheIntemetsothisrequirementneednetworkmeasurementdomorethingsAtthesametime，itisdifficultytoimplementpassivemeasurementba

3、sedona11trafficthroughthenetworkbecauseoftheincreasementofthelinkspeedandthetrafficItisalsodifficultytotransmit，analyseandstoreThedatageneratedbythenetworkmeasurementAmongalltheflowtrafficmeasurementtechniquesNetFlowhasb

4、ecomematureandthestandardofthelPtrafficstatistics、analysisandaccountThiethesisdoesresearchontheobservationrequirementoftheJiangsuprovincenetworkinsoutheasternChina(North)RegionalNetworkCenterwhichplacesanemphasisonthreei

5、ssues：arealtimenetworktra炳caccountingmodelbasedonNetFlow；thedefinitionofnetworkmanagementmetricsandmethodologyofmeasurement；unifiedflowrecordformatfromtwodifferentdatasourcesandstorageflowdesign，designandimplementtheNetw

6、orkBehaviorObservationSystem(NBOS)basedonNetFIowFirstlyinthisthesis，currentnetworktrafficinformationextractiontechniqueandtheexistingprobleminthenetworkoperationhavebeenintroducedtheflowlevelmonitoringisreferedtocomplete

7、thetrafficobservationThentheflowtechniqueisgivenallintroduction，especiallytheNetFIowtechniquebackground，includingthebasicconcept、theNetFIowflowcreationtechniqueandsoon，atlastthethesisgivescurrentresearchsummarybasedonNet

8、FlowSecondlythispaperhasresearchinsomekeyissuesaboutthedesignandimplementationofNBOS，includingthemodelingofreal—timenetworktrafficaccountingmodelbasedonNetFIowthedefinitionofnetworkoperationmetricsandmethodologyofmeasure

9、ment、thedatamanagementinthesystemBasedontheanalysisofshortageinthecurrenttrafficaccountingmodel，inthisthesisanewRealtimenetworktrafficaccountingmodelisgiventosolvetwokindoferrors，theauthormainlyanalysethereasonfortheseco

10、nderrorandgivethesolutionandthemodelingstepsbasedonsomehypothesisThentheconcretemodelparameterssuchasmeasurementtimewindowaresetfromtheanalysisoftherealnetworktrafficdataintheJSERNET1ntheendtheerrorestimationformulaonthe

11、seconderrorispresentedNBOSdescribesthenetworkstatusandtrafficbehaviorthroughthenetworkmanagementmetricsThethesisdiscussedthedefinitionandmethodologyofmeasurementofrelativenetworkmanagementmetricsFirstlythepaperanalysesth

12、ecurrentrequirementandthefieldoftheNetFlowflowrecord，liststheclassofthenetworkmanagementmetrics，thenanalysesthekeyalgorithmsonthemetriccomputationbasedontheNetFlowflowrecord，mainlyfocusonthebufferandquickaccess，sort，comp

13、arationabouttheflowdataTwokindofhashalgorithmsanddirectinsertionsortisgivenAtlast，networkmanagementmetricsareintroducedincludingthemotivation、definitionandmethodologyindetailTherearetwokindsofdatasourcesintheNBOSsystem：t