【摘要】：隨著網(wǎng)絡(luò)技術(shù)的快速發(fā)展，信息交流的形式也從原來低帶寬要求的文件傳輸、網(wǎng)頁新聞、電子郵件和論壇等升級到網(wǎng)絡(luò)圖片、語音通話及視頻會議等大流量業(yè)務(wù)，網(wǎng)絡(luò)從文字時代步入到多媒體時代。與此同時，互聯(lián)網(wǎng)所承載的業(yè)務(wù)種類和應(yīng)用數(shù)量也在不斷增長，因此所需要的帶寬與之前相比成指數(shù)級增長，使網(wǎng)絡(luò)帶寬資源趨于緊張。此外，，隨著電子商務(wù)、電子支付、數(shù)字貨幣、網(wǎng)絡(luò)銀行等各類新業(yè)務(wù)的開發(fā)，網(wǎng)絡(luò)內(nèi)容安全變得越來越嚴(yán)重。基于網(wǎng)絡(luò)的各種企業(yè)應(yīng)用迅速增長，企業(yè)網(wǎng)絡(luò)規(guī)模隨著企業(yè)規(guī)模的擴大也在不斷增加，企業(yè)需要對內(nèi)網(wǎng)和外網(wǎng)進行嚴(yán)格約束。這幾個問題是信息化社會迫切需要解決的，就目前來看，解決這些問題的最重要方案之一就是對網(wǎng)絡(luò)流量進行監(jiān)控，如何設(shè)計高速網(wǎng)絡(luò)環(huán)境下提供應(yīng)用層監(jiān)測能力的企業(yè)級流量監(jiān)控系統(tǒng)是本文研究的課題。 本文對流量識別和流量控制等與流量監(jiān)控相關(guān)的重要知識點作了研究和分析之后，設(shè)計和實現(xiàn)了一個適合于企業(yè)使用的應(yīng)用層流量監(jiān)控系統(tǒng)。本文所做的主要工作如下所示： (1)研究并分析了市場上的流量監(jiān)控設(shè)備及當(dāng)前流量監(jiān)控技術(shù)領(lǐng)域的研究成果，根據(jù)當(dāng)前的網(wǎng)絡(luò)環(huán)境確立了系統(tǒng)設(shè)計的定位。 (2)深入研究流量識別中常用的識別技術(shù)和流量控制里面比較流行的控制技術(shù)。在此基礎(chǔ)上設(shè)計和實現(xiàn)了應(yīng)用層流量監(jiān)控系統(tǒng)的設(shè)計目標(biāo)、系統(tǒng)架構(gòu)以及各個模塊具體的實現(xiàn)，并給出了系統(tǒng)的網(wǎng)絡(luò)部署方案。 (3)當(dāng)前用軟件方法單獨檢測無法解決高速網(wǎng)絡(luò)環(huán)境下的實時檢測問題，本文通過硬件狀態(tài)機和軟件狀態(tài)機結(jié)合的方式，并采用分圖機制，對系統(tǒng)進行加速，從而實現(xiàn)了在高速網(wǎng)絡(luò)環(huán)境下的流量識別模塊的實時性要求。研究和實現(xiàn)了基于策略庫并可以通過手動和自動的方式對應(yīng)用層流量進行控制。 (4)對應(yīng)用層網(wǎng)絡(luò)流量監(jiān)控系統(tǒng)從吞吐量、準(zhǔn)確度兩個性能指標(biāo)和阻斷、限流兩個功能指標(biāo)上進行了仿真實驗與結(jié)果分析，并指明了未來的研究工作及方向。 本文通過軟硬件狀態(tài)機結(jié)合、分圖處理、基于策略庫等方式實現(xiàn)了高速網(wǎng)絡(luò)環(huán)境下的流量監(jiān)控系統(tǒng)，本系統(tǒng)的功能和性能都達到了系統(tǒng)指標(biāo)，但本系統(tǒng)也有很多不足之處，在界面優(yōu)化、特征提取、流量采集、預(yù)處理和流量控制算法等方面都可以做進一步研究。
[Abstract]:With the rapid development of network technology, the form of information exchange has also been upgraded from low-bandwidth file transfer, web news, e-mail and forums to large traffic services such as network pictures, voice calls and video conferencing. The network has stepped into the era of multimedia from the age of characters. At the same time, the types of services and applications carried by the Internet are increasing constantly, so the bandwidth required increases exponentially compared with the previous ones, which makes the network bandwidth resources tense. In addition, with the development of e-commerce, electronic payment, digital currency, network banking and other new services, network content security has become more and more serious. All kinds of enterprise applications based on network are growing rapidly, and the scale of enterprise network is increasing with the expansion of enterprise scale. Enterprises need to strictly restrict the internal and external networks. These problems are urgently needed to be solved in the information society. At present, one of the most important solutions to solve these problems is to monitor the network traffic. How to design an enterprise-class traffic monitoring system which can provide application-layer monitoring ability in high-speed network environment is the subject of this paper. After studying and analyzing the important knowledge points related to traffic monitoring, such as flow identification and flow control, this paper designs and implements an application layer traffic monitoring system which is suitable for enterprise use. The main work of this paper is as follows: (1) Research and analysis of the flow monitoring equipment in the market and the current research results in the field of flow monitoring technology, according to the current network environment, the positioning of the system design is established. (2) deeply study the commonly used identification technology and the popular control technology in flow control. On this basis, the design objectives, system architecture and specific implementation of each module of the application layer traffic monitoring system are designed and realized, and the network deployment scheme of the system is given. (3) at present, it is impossible to solve the problem of real-time detection in high-speed network environment by means of software detection alone. This paper accelerates the system by combining hardware state machine with software state machine and adopting sub-graph mechanism. Thus, the real-time requirement of the traffic identification module in the high-speed network environment is realized. The policy-based library is researched and implemented, and the application layer traffic can be controlled manually and automatically. (4) the simulation experiment and result analysis of the application layer network traffic monitoring system from throughput, accuracy, blocking and current limiting are carried out, and the future research work and direction are pointed out. In this paper, through the combination of hardware and software state machine, sub-graph processing, policy base and other ways to realize the high-speed network environment traffic monitoring system, the function and performance of the system has reached the system target, but this system also has a lot of shortcomings. Further research can be done on interface optimization, feature extraction, flow collection, pretreatment and flow control algorithms.
【學(xué)位授予單位】：江西理工大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2014
【分類號】：TP393.06

【參考文獻】

相關(guān)期刊論文 前10條

1 徐雅斌;李艷平;劉曦子;;一個基于云計算的P2P流量識別系統(tǒng)模型的研究[J];電信科學(xué);2012年10期

2 王海濤;宋麗華;;基于業(yè)務(wù)等級的自適應(yīng)帶寬分配機制及性能仿真[J];航空電子技術(shù);2010年03期

3 溫曙光;謝高崗;;libpcap-MT:一種多線程的通用數(shù)據(jù)包捕獲庫[J];計算機研究與發(fā)展;2011年05期

4 王杰;劉亞賓;孫珂珂;;一種快速高效的模式匹配算法的應(yīng)用研究[J];計算機工程與應(yīng)用;2008年32期

5 陳亮;龔儉;徐選;;應(yīng)用層協(xié)議識別算法綜述[J];計算機科學(xué);2007年07期

6 金順福;呂倩;王朋;李小良;;一種動態(tài)帶寬分配策略及其性能分析[J];計算機工程;2012年09期

7 姚遠(yuǎn);劉鵬;單征;田雙鵬;;面向存儲的正則表達式匹配算法綜述[J];計算機應(yīng)用;2009年12期

8 李致遠(yuǎn);王汝傳;;一種基于機器學(xué)習(xí)的P2P網(wǎng)絡(luò)流量識別方法[J];計算機研究與發(fā)展;2011年12期

9 于明;朱超;;利用半監(jiān)督近鄰傳播聚類算法實現(xiàn)P2P流量識別[J];哈爾濱工程大學(xué)學(xué)報;2013年05期

10 湯昊;李之棠;;基于DPI的P2P流量控制系統(tǒng)的設(shè)計與實現(xiàn)[J];信息安全與通信保密;2007年06期

相關(guān)博士學(xué)位論文 前1條

1 劉舸;基于網(wǎng)絡(luò)效應(yīng)的電信運營商IM市場競爭研究[D];北京郵電大學(xué);2009年

本文編號：2437803