期刊文献+
任意字段
题名或关键词
题名
关键词
文摘
作者
第一作者
机构
刊名
分类号
参考文献
作者简介
基金资助
栏目信息

基于WinPcap的实时网络监测系统 被引量：11

A Real-Time Network Monitor System Based on WinPcap
在线阅读 下载PDF
导出
摘要 实现了一个基于WinPcap的实时网络流量监测系统，完成了数据包级和流级的流量指标，包括2～7层协议分布，不同协议的流量速率，包大小分布，不同聚集程度的流分布。前N名的IP主机和主机对分布等；并提供网络运行状态的告警指标．实验结果表明，对于100M以太网。基于WinPeap的软件捕获流量监测程序的处理上限为60000packet／s，完全可以胜任100M以太网监测需求． This paper provided a real-time network monitor system based on WinPcap, which supported packet level and flow level traffic metrics such as link utilization, protocol distribution in 2-7 protocol levels, various aggravated flow distribution, top NIP host and IP host pair. The monitor system also supported network worrying and alert statistics. Performance evaluations have shown that the monitor system can process up to 60 000 packets per sec on 100 M Ethernet link. This demonstrates that the software network monitor system is applicable to 100 M Ethernet Networks.
作者 谢鲲 张大方 文吉刚 谢高岗
机构地区 湖南大学计算机与通信学院 湖南大学软件学院 中国科学院计算技术研究所信息网络研究室
出处 《湖南大学学报（自然科学版）》 EI CAS CSCD 北大核心 2006年第2期118-121,共4页 Journal of Hunan University:Natural Sciences
基金 国家自然科学基金资助项目(60473031 60273070 60403031) 国家863高技术研究发展计划资助项目(2005AA121560)
关键词 流量分析 被动网络测试 计算机网络 网络协议 network traffic analysis passive network measurement computer network network protocols
分类号 TP393.07 [自动化与计算机技术—计算机应用技术]
  • 相关文献

参考文献8

  • 1谢鲲,张大方.共享网段网络协议分析系统设计与实现[J].计算机工程与科学,2002,24(2):25-28. 被引量：6
  • 2PAXSON V.Bro:a system for detecting network intruders in real-time[J].Computer Networks,1999,31:2 435-2 463.
  • 3LORIS D,MARIO B,FULIVIO R,et al.Profiling and optimization of software-based network-analysis applications[C]//Proc of the 15th IEEE SBAC-PAD.Sao Paulo:2003,226 -234.
  • 4IANNACCONE G,DIOT C,GRAHAM I,et al.Monitoring very high speed links[C]//Proc of ACM SIGCOMM Internet Measurement Workshop.Francisco:2001,267-271.
  • 5Claffy K C,Braun H W,Polyzos G C.A parameterizable methodology for Internet traffic flow profiling[J].IEEE Journal on Selected Areas in Communications,1995,13(8):1 481 -1 494.
  • 6WILLIAMSON C.Intemet traffic measurement[J].IEEE Internet Computing,2001,5(6):70-74.
  • 7谢鲲,张大方,谢高岗,文吉刚,黎文伟.一种基于网络业务流的流量监测分析算法[J].小型微型计算机系统,2006,27(1):46-49. 被引量：8
  • 8张大方,沈永坚,黎文伟.一种基于历史记录的网络流量数据采样方法[J].湖南大学学报（自然科学版）,2005,32(6):102-105. 被引量：5

二级参考文献23

  • 1Chinchilla R, J Hoag J, D Koonce D et al. Characterization of internet traffic and user classification: Foundations for the next generation of network emulation[C]. In: Proe of the 10th International Conference on Telecommunication Systems, Modeling and Analysis (ICTSM10), Moterey: 2002,44-52.
  • 2Bellardo J. Savage S. Measuring packet reordering [C]. In:Proc of the 2nd ACM SIGCOMM Workshop on Internet measurment workshop, Marseille, France: ACM Press, 2002,97-105.
  • 3Bykova M, Ostermann S. Statistical analysis of malformed packets and their origins in the modern internet[C]. In: Proc of the 2nd ACM SIGCOMM Workshop on Internet measurment workshop, Marseille, France: ACM Press, 2002,83-88.
  • 4Shannon C, Moore D, Claffy k. Characteristics of fragmented IP traffic on internet links[C]. In: Proc of the 1st ACM SIGCOMM Workshop on Internet Measurement Workshop, San Francisco, California. USA :ACM Press, 2001,83-97.
  • 5Jaiswal S, Iannaccone G, Diot C et al. Measurement and classification of out-of-sequence packets in a tier-1 IP backbone[C].In: Proc of the 2nd ACM SIGCOMM Workshop on Internet measurment workshop, Marseille, France: ACM Press, 2002,113-114.
  • 6Smith F D, Campos H, Jeffay K. What TCP/IP protocol headers can tell us about the web[C]. In: Proc of the 2001 ACM SIGMETRICS international conference on Measurement and modeling of computer systems, Cambridge, Massachusetts,USA: ACM Press,2001, 245-256.
  • 7Iannaccone G, Diot C, Graham I et al. Monitoring very high speed links[C]. In :Proc of ACM SIGCOMM Internet Measurement Workshop, San Francisco, California, USA: ACM Press, 2001, 267-271.
  • 8Jain R, Routhier S A. Packet trains-measurement and a newmodel for computer network traffic[J]. IEEE Journal on SelectArea in Communications, 1986,4(6):986-995.
  • 9Claffy K C, Braun H W, Polyzos G C. A parameterizable methodology for Internet traffic flow profiling[J]. IEEE Journal on Selected Areas in Communications, 1995,13 (8) : 1481-1494.
  • 10Ryu, Bo, Cheney D et al. Internet flow characterization: Adaptive timeout strategy and statistical modeling[C]. In: Proc of PAM2001 Workshop, Amsterdam, Netherlands: 2001, 94-105.

共引文献14

同被引文献86

引证文献11

二级引证文献26

湖南大学学报（自然科学版）
2006年 第2期

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部