第四章网络测量和监控（三）.ppt

第四章 网络测量和监控 第一节 网络测量技术综述 第二节 网络测量技术专题 第三节 网络测量系统举例 科技奥运信息网络蓝图 第三节 网络测量系统举例 Organizations Measurement Classification Measurement Projects Overview 比较 一、 Organizations IETF IP Performance Metrics (IPPM) Realtime Traffic Flow Measurement (RTFM) NLANR Measurement Operations Analysis Team National Center for Network Engineering CAIDA IETF IPPM Working Group Develop metrics for wide-area network measurement IPPM: Metrics Framework: RFC2330 Connectivity One-way delay and loss Round-trip delay and loss Flow capacity/Bulk transfer capacity Delay variation (jitter) /IPPM/ RTFM Measure network flows through passive measurments Standards for architecture; metrics for traffic flows language to describe flows MIB to control meter gather measurements Origin in accounting http://www.auckland.ac.nz/net/Internet/rtfm NLANR NLANR（1995-1997）: concerted effort across NSF funded supercomputing centers, with focus on the vBNS and the HPC community NLANR （1998）： continued collaborative and expanded effort across three parties: Distributed Applications Support Team (DAST at UIUC/NCSA) Measurement and Operations Analysis Team (MOAT at UCSD/SDSC) National Center for Network Engineering (NCNE at CMU/PSC) Web server： Offspring focused on commercial market：CAIDA () CAIDA () Cooperative Association for Internet Data Analysis Based at Univ of California (SDSC) NSF and Commercial Funding (Cisco, ANS) Clearinghouse, coordinating body for network statistics Tool Development Network Visualization Multicast statistics Packet traces 二、Measurement Classification Utilization [usually SNMP] Active measurements ~Performance (one-way delay, loss, throughput) Passive measurements ~Traffic characterization Routing [usually BGP/traceroute] 测量项目 静态配置信息：SNMP 网络拓扑和路由 故障发现和定位 性能（效能）：延迟、丢包、利用率 安全：弱点、热点、防御、追踪、取证、内容 使用：时间、带宽、字节、应用、服务 行为：时间规律、空间规律、内容规律、“品行”规律 测量方法 主动式测量方法 利用网络对“探测包”的反映来测量 ping、Trace 通过网络对“探测包”的服务情况来实现测量treno测量吞吐率 可能会产生“Heisenberg”效应，即由于“探测包”影响了网络的性能，从而影响了测量结果的客观性 被动式测量方法 ：不可感知 测量方法 Router