本文選題：流量采集　切入點(diǎn)：IP地址　出處：《東華大學(xué)》2014年碩士論文

【摘要】：截止2013年6月底,我國(guó)網(wǎng)民規(guī)模已經(jīng)達(dá)到5.9億,互聯(lián)網(wǎng)已經(jīng)廣泛地被應(yīng)用到日常工作、生活中的方方而面。然而,隨著網(wǎng)民數(shù)量的急劇增加,區(qū)分IP地址的來(lái)源在許多互聯(lián)網(wǎng)應(yīng)用或?qū)Π踩筝^高的企事業(yè)單位是非常重要的關(guān)注內(nèi)容。IP地址的來(lái)源,所屬ISP供應(yīng)商、所屬企業(yè)或個(gè)人、或IP數(shù)據(jù)包最原始的來(lái)源主機(jī)等信息是IP地址定位查詢的重要內(nèi)容�；诹髁坎杉癐P查詢定位的技術(shù)能夠幫助互聯(lián)網(wǎng)網(wǎng)站管理人員在不同粒度上對(duì)IP地址的來(lái)源進(jìn)行定位,提高網(wǎng)站的安全性和可用性。 由于用戶接入網(wǎng)絡(luò)方式的趨于多樣化,針對(duì)不同的通信傳輸信道設(shè)計(jì)精確的IP查詢定位系統(tǒng)有時(shí)很難達(dá)到預(yù)期的目標(biāo)。雖然現(xiàn)在已經(jīng)出現(xiàn)相關(guān)的IP地理信息查詢定位系統(tǒng),但在一定程度上不能覆蓋相關(guān)瀏覽客戶端的定位信息。對(duì)IP地址進(jìn)行細(xì)粒度的定位,如對(duì)NAT轉(zhuǎn)換之前的IP地址查詢及相關(guān)主機(jī)信息查詢定位一直沒(méi)有較好的方法。本文在對(duì)IP地址分配理論進(jìn)行深入研究的基礎(chǔ)上,對(duì)互聯(lián)網(wǎng)現(xiàn)狀進(jìn)行了分析,重點(diǎn)對(duì)當(dāng)今主流的IPV4網(wǎng)絡(luò)進(jìn)行研究分析,包括營(yíng)運(yùn)商IPV4地址分配方案,營(yíng)運(yùn)商網(wǎng)絡(luò)的組織結(jié)構(gòu)和網(wǎng)絡(luò)分配的層次結(jié)構(gòu)。 本文描述的主要研究和實(shí)踐工作概述如下： 1)重點(diǎn)研究企業(yè)內(nèi)部的IPV4網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu),對(duì)不同復(fù)雜度的網(wǎng)絡(luò)進(jìn)行分析,對(duì)非企業(yè)內(nèi)部網(wǎng)絡(luò)IP地址的查詢?cè)O(shè)計(jì)了一種基于IP分配記錄信息數(shù)據(jù)庫(kù)查詢的定位方案,對(duì)于企業(yè)內(nèi)部包含大量私有網(wǎng)絡(luò)的實(shí)際情況設(shè)計(jì)了一種基于流量采集技術(shù)的企業(yè)內(nèi)部私有IP地址定位查詢方案。 2)詳細(xì)描述了一種基于流量采集及IP查詢應(yīng)用系統(tǒng)的開(kāi)發(fā)過(guò)程。通過(guò)對(duì)WHOIS服務(wù)的訪問(wèn)和返回?cái)?shù)據(jù)的解析,設(shè)計(jì)了一種簡(jiǎn)潔且結(jié)果可讀性更強(qiáng)的IP地址ISP來(lái)源信息的查詢子系統(tǒng)。同時(shí)針對(duì)ISP服務(wù)商IP資源的分配特點(diǎn),設(shè)計(jì)了一種基于IP地址分配記錄數(shù)據(jù)庫(kù)查詢的IP查詢定位系統(tǒng)。針對(duì)互聯(lián)網(wǎng)企業(yè)的網(wǎng)絡(luò)結(jié)構(gòu)實(shí)際情況,設(shè)計(jì)了一種基于流量采集技術(shù)的企業(yè)內(nèi)部私有IP地址的查詢定位系統(tǒng)。 3)實(shí)現(xiàn)了基于WHOIS服務(wù)的ISP信息查詢子系統(tǒng)和基于流量采集技術(shù)的企業(yè)內(nèi)部私有IP地址查詢定位系統(tǒng),提供了良好的操作界面和查詢接口。 本文作者研究、設(shè)計(jì)和實(shí)踐的部分技術(shù)成果已經(jīng)在某企業(yè)單位配合安全檢測(cè)系統(tǒng)的使用中得到了成功的應(yīng)用。
[Abstract]:By the end of June 2013, the number of Internet users in China has reached 590 million. The Internet has been widely used in daily work and life.However, with the rapid increase in the number of Internet users, distinguishing the source of IP addresses in many Internet applications or enterprises and institutions with high security requirements is a very important source of concern. IP addresses belong to ISP suppliers, enterprises or individuals.Or IP packet original source host and other information is an important content of IP address location query.The technology based on traffic collection and IP query location can help Internet website managers locate the source of IP address in different granularity and improve the security and usability of the website.Due to the diversification of user access network, it is difficult to design accurate IP query and location system for different communication transmission channels.Although there are related IP geographic information query and location systems, to a certain extent, it can not cover the location information of related browsing clients.There is no good way to locate the IP address with fine granularity, such as the IP address query before NAT translation and the related host information query.Based on the in-depth study of IP address allocation theory, this paper analyzes the current situation of the Internet, focusing on the mainstream IPV4 network, including the operator IPV4 address allocation scheme.The organizational structure of the operator network and the hierarchical structure of the network allocation.The main research and practical work described in this paper are summarized as follows:1) focusing on the IPV4 network topology in the enterprise, analyzing the different complexity of the network, and designing a location scheme based on IP assignment record information database query for the IP address query of the non-enterprise internal network.In this paper, a private IP address location query scheme based on traffic acquisition technology is designed for the actual situation of a large number of private networks in an enterprise.2) the development process of an application system based on traffic collection and IP query is described in detail.By accessing the WHOIS service and parsing the returned data, a simple and more readable query subsystem of IP address ISP source information is designed.According to the characteristics of IP resource allocation of ISP service provider, an IP query location system based on IP address assignment record database query is designed.According to the actual situation of network structure of Internet enterprises, a query and location system of private IP address in enterprises based on traffic acquisition technology is designed.3) the ISP information query subsystem based on WHOIS service and the private IP address query and positioning system based on traffic collection technology are implemented, which provides a good interface and interface.The author studies, designs and practices some technical achievements which have been successfully applied in the application of the safety inspection system in a certain enterprise.
【學(xué)位授予單位】：東華大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.07

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 于元波;NAT技術(shù)在組網(wǎng)過(guò)程中的實(shí)際應(yīng)用[J];電腦知識(shí)與技術(shù);2005年20期

2 蔡豪;李娜;;基于WinPcap的網(wǎng)絡(luò)數(shù)據(jù)包捕獲的研究[J];電腦知識(shí)與技術(shù);2010年13期

3 包竹妮,吳志遠(yuǎn);關(guān)于IP地址分配的技術(shù)探討[J];電信科學(xué);1998年02期

4 羅淳榕;秦現(xiàn)生;馬新剛;;基于CGI的嵌入式遠(yuǎn)程控制系統(tǒng)[J];測(cè)控技術(shù);2006年08期

5 孫鵬,董玉華,韓正之;基于數(shù)據(jù)鏈路層的局域網(wǎng)流量統(tǒng)計(jì)的實(shí)現(xiàn)[J];計(jì)算機(jī)工程與應(yīng)用;2002年05期

6 吳文光,張?jiān)铝?Linux下實(shí)現(xiàn)網(wǎng)絡(luò)流量記錄[J];計(jì)算機(jī)工程;2000年S1期

7 覃匡宇,秦濤,王勇;用Libpcap函數(shù)實(shí)現(xiàn)NAT網(wǎng)關(guān)的研究[J];計(jì)算機(jī)工程;2003年15期

8 胡文靜;李明;劉錦高;;基于LIBPCAP的網(wǎng)絡(luò)流量實(shí)時(shí)采集與信息萃取[J];計(jì)算機(jī)應(yīng)用研究;2006年06期

9 李若霖;王金一;陶智勇;陳琦;南凱;閻保平;;基于Libpcap的局域網(wǎng)流量測(cè)量系統(tǒng)設(shè)計(jì)與實(shí)現(xiàn)[J];計(jì)算機(jī)應(yīng)用研究;2006年10期

10 徐貴寶;運(yùn)營(yíng)商網(wǎng)絡(luò)IP地址分配原則[J];通信世界;2004年23期

，

本文編號(hào)：1729718