本文選題：流量采集　切入點：IP地址　出處：《東華大學》2014年碩士論文

【摘要】：截止2013年6月底,我國網(wǎng)民規(guī)模已經(jīng)達到5.9億,互聯(lián)網(wǎng)已經(jīng)廣泛地被應用到日常工作、生活中的方方而面。然而,隨著網(wǎng)民數(shù)量的急劇增加,區(qū)分IP地址的來源在許多互聯(lián)網(wǎng)應用或?qū)Π踩筝^高的企事業(yè)單位是非常重要的關(guān)注內(nèi)容。IP地址的來源,所屬ISP供應商、所屬企業(yè)或個人、或IP數(shù)據(jù)包最原始的來源主機等信息是IP地址定位查詢的重要內(nèi)容。基于流量采集及IP查詢定位的技術(shù)能夠幫助互聯(lián)網(wǎng)網(wǎng)站管理人員在不同粒度上對IP地址的來源進行定位,提高網(wǎng)站的安全性和可用性。 由于用戶接入網(wǎng)絡方式的趨于多樣化,針對不同的通信傳輸信道設計精確的IP查詢定位系統(tǒng)有時很難達到預期的目標。雖然現(xiàn)在已經(jīng)出現(xiàn)相關(guān)的IP地理信息查詢定位系統(tǒng),但在一定程度上不能覆蓋相關(guān)瀏覽客戶端的定位信息。對IP地址進行細粒度的定位,如對NAT轉(zhuǎn)換之前的IP地址查詢及相關(guān)主機信息查詢定位一直沒有較好的方法。本文在對IP地址分配理論進行深入研究的基礎上,對互聯(lián)網(wǎng)現(xiàn)狀進行了分析,重點對當今主流的IPV4網(wǎng)絡進行研究分析,包括營運商IPV4地址分配方案,營運商網(wǎng)絡的組織結(jié)構(gòu)和網(wǎng)絡分配的層次結(jié)構(gòu)。 本文描述的主要研究和實踐工作概述如下： 1)重點研究企業(yè)內(nèi)部的IPV4網(wǎng)絡拓撲結(jié)構(gòu),對不同復雜度的網(wǎng)絡進行分析,對非企業(yè)內(nèi)部網(wǎng)絡IP地址的查詢設計了一種基于IP分配記錄信息數(shù)據(jù)庫查詢的定位方案,對于企業(yè)內(nèi)部包含大量私有網(wǎng)絡的實際情況設計了一種基于流量采集技術(shù)的企業(yè)內(nèi)部私有IP地址定位查詢方案。 2)詳細描述了一種基于流量采集及IP查詢應用系統(tǒng)的開發(fā)過程。通過對WHOIS服務的訪問和返回數(shù)據(jù)的解析,設計了一種簡潔且結(jié)果可讀性更強的IP地址ISP來源信息的查詢子系統(tǒng)。同時針對ISP服務商IP資源的分配特點,設計了一種基于IP地址分配記錄數(shù)據(jù)庫查詢的IP查詢定位系統(tǒng)。針對互聯(lián)網(wǎng)企業(yè)的網(wǎng)絡結(jié)構(gòu)實際情況,設計了一種基于流量采集技術(shù)的企業(yè)內(nèi)部私有IP地址的查詢定位系統(tǒng)。 3)實現(xiàn)了基于WHOIS服務的ISP信息查詢子系統(tǒng)和基于流量采集技術(shù)的企業(yè)內(nèi)部私有IP地址查詢定位系統(tǒng),提供了良好的操作界面和查詢接口。 本文作者研究、設計和實踐的部分技術(shù)成果已經(jīng)在某企業(yè)單位配合安全檢測系統(tǒng)的使用中得到了成功的應用。
[Abstract]:By the end of June 2013, the number of Internet users in China has reached 590 million. The Internet has been widely used in daily work and life.However, with the rapid increase in the number of Internet users, distinguishing the source of IP addresses in many Internet applications or enterprises and institutions with high security requirements is a very important source of concern. IP addresses belong to ISP suppliers, enterprises or individuals.Or IP packet original source host and other information is an important content of IP address location query.The technology based on traffic collection and IP query location can help Internet website managers locate the source of IP address in different granularity and improve the security and usability of the website.Due to the diversification of user access network, it is difficult to design accurate IP query and location system for different communication transmission channels.Although there are related IP geographic information query and location systems, to a certain extent, it can not cover the location information of related browsing clients.There is no good way to locate the IP address with fine granularity, such as the IP address query before NAT translation and the related host information query.Based on the in-depth study of IP address allocation theory, this paper analyzes the current situation of the Internet, focusing on the mainstream IPV4 network, including the operator IPV4 address allocation scheme.The organizational structure of the operator network and the hierarchical structure of the network allocation.The main research and practical work described in this paper are summarized as follows:1) focusing on the IPV4 network topology in the enterprise, analyzing the different complexity of the network, and designing a location scheme based on IP assignment record information database query for the IP address query of the non-enterprise internal network.In this paper, a private IP address location query scheme based on traffic acquisition technology is designed for the actual situation of a large number of private networks in an enterprise.2) the development process of an application system based on traffic collection and IP query is described in detail.By accessing the WHOIS service and parsing the returned data, a simple and more readable query subsystem of IP address ISP source information is designed.According to the characteristics of IP resource allocation of ISP service provider, an IP query location system based on IP address assignment record database query is designed.According to the actual situation of network structure of Internet enterprises, a query and location system of private IP address in enterprises based on traffic acquisition technology is designed.3) the ISP information query subsystem based on WHOIS service and the private IP address query and positioning system based on traffic collection technology are implemented, which provides a good interface and interface.The author studies, designs and practices some technical achievements which have been successfully applied in the application of the safety inspection system in a certain enterprise.
【學位授予單位】：東華大學
【學位級別】：碩士
【學位授予年份】：2014
【分類號】：TP393.07

【參考文獻】

相關(guān)期刊論文 前10條

1 于元波;NAT技術(shù)在組網(wǎng)過程中的實際應用[J];電腦知識與技術(shù);2005年20期

2 蔡豪;李娜;;基于WinPcap的網(wǎng)絡數(shù)據(jù)包捕獲的研究[J];電腦知識與技術(shù);2010年13期

3 包竹妮,吳志遠;關(guān)于IP地址分配的技術(shù)探討[J];電信科學;1998年02期

4 羅淳榕;秦現(xiàn)生;馬新剛;;基于CGI的嵌入式遠程控制系統(tǒng)[J];測控技術(shù);2006年08期

5 孫鵬,董玉華,韓正之;基于數(shù)據(jù)鏈路層的局域網(wǎng)流量統(tǒng)計的實現(xiàn)[J];計算機工程與應用;2002年05期

6 吳文光,張月琳;Linux下實現(xiàn)網(wǎng)絡流量記錄[J];計算機工程;2000年S1期

7 覃匡宇,秦濤,王勇;用Libpcap函數(shù)實現(xiàn)NAT網(wǎng)關(guān)的研究[J];計算機工程;2003年15期

8 胡文靜;李明;劉錦高;;基于LIBPCAP的網(wǎng)絡流量實時采集與信息萃取[J];計算機應用研究;2006年06期

9 李若霖;王金一;陶智勇;陳琦;南凱;閻保平;;基于Libpcap的局域網(wǎng)流量測量系統(tǒng)設計與實現(xiàn)[J];計算機應用研究;2006年10期

10 徐貴寶;運營商網(wǎng)絡IP地址分配原則[J];通信世界;2004年23期

，

本文編號：1729718