增强的Netflow数据采集系统设计与实现
증강적Netflow수거채집계통설계여실현
Design and implementation of enhanced Netflow data collection system
  • 万方数据
    计算机工程与设计 계산궤공정여설계
    COMPUTER ENGINEERING AND DESIGN
    2015年 5期 1150-1155 ,共6页

    刘恩海%刘微%樊世燕%梁慧%穆立

    류은해%류미%번세연%량혜%목립

    Netflow%流量分析%深度包检测%协议识别%数据采集 Netflow%流量分析%深度包檢測%協議識彆%數據採集
    Netflow%류량분석%심도포검측%협의식별%수거채집
    Netflow%traffic analysis%deep packet inspection%application identification%data collection
    基于端口号进行网络流量分析的Netflow技术无法准确地回答网络流分别由哪些应用协议组成及其比例等问题，也不能提供web用户行为数据来反映用户对大多数网站的访问情况。为改进上述缺陷，提出一种增强的Netflow数据采集系统。结合flow和深度包检测技术进行精确的应用协议识别，对web用户行为数据进行采集与动态存储，为网络流量监测与分析提供全面的数据支撑，设计并实现该系统，验证了其有效性和可行性。
    기우단구호진행망락류량분석적Netflow기술무법준학지회답망락류분별유나사응용협의조성급기비례등문제，야불능제공web용호행위수거래반영용호대대다수망참적방문정황。위개진상술결함，제출일충증강적Netflow수거채집계통。결합flow화심도포검측기술진행정학적응용협의식별，대web용호행위수거진행채집여동태존저，위망락류량감측여분석제공전면적수거지탱，설계병실현해계통，험증료기유효성화가행성。
    Port-based traffic identification that employed in Netflow technique for protocol analysis fails to answer the composi-tion and proportion of the traffic accurately,meanwhile,details can not be adequately provided for analysis of most site access be-havior.To overcome above defects,an enhanced Netflow data collection method was proposed.Flow and deep packet inspection technique were combined for accurate application identification,the site access behavior data were collected and stored dynamical-ly,which laid a comprehensive data foundation for traffic analysis.Finally,the feasibility and effectiveness of the system were verified.
    원문보기 원문다운로드 사이트로이동
저자의 최근 논문