高效率多线程网络流量采集算法研究及实践.PDFVIP

3 1 1 ( ) V ol 31 N o1 2006 2 Journal ofK unm ing U n iversity of Sc ience and T echnology ( Sc ience and T echnology) Feb 2006 袁梅宇 ( , 650051) : 介绍了采用 SNM P 协议采集 C ISCO 路由器网络流量的方法, 对流量采集算法进行了分析, 提出一种高效率的流量采集算法 建四个线程进行数据采集和处理: 发送线程接收线程预处 理线程和存储线程 发送线程负责发送 SNM P 请求报文, 接收线程负责接收 SNM P 响应报文, 预 处理线程过滤及整合采集到的流量信息, 存储线程负责将预处理后的数据持久地存入数据库中 由于采用并行方式进行数据采集, 该算法较串行采集效率高, 并在实践中验证其可行性 : 网络流量; SNMP 协议; C ISCO路由器 : TP393 07 : A : 1007- 855X ( 2006) 01- 0032 - 05 On theHighEfficiencyMultithreadingNetFlow CollectionAlgorithm and RelevantPractice YUA N Me-i yu ( Facu lty o f Inform ation Eng ineering and Autom ation, Kunm ing Un iversity of Science and T echno logy, K unm ing 650051, China) Abstract: M ethods of using SNMP P ro toco l to co llect net flow by addressing C ISCO router are introdu ced N et flow collection algorithm s are carefully analyzed A n e ff icient ne t flow collection a lgorithm is proposed Four threads are created to handle data co llection and data processing w hose function s are send ing, receiv ing, pre- processing, and storing up the thread Send ing thread takes responsib ility of sending SNMP request m essages, w hile receiv ing thread takes ch arge of receiving SNMP respon se m essages Du e to the fact o f para llel data co llec- t ion, the a lgorithm is sure o f h igh efficiency P re- processing thread filtrates and processes raw data, and stores thread feeds data into databases The approach has already been verified in practice ey words: net flow; SNM P pro toco;l CISCO router 0 , , , ISP , ; , ( ), ( IP ) ,