网络流量分析研究.docVIP

天津理工大学2014届本科毕业论文 1 网络流量分析研究 摘要 网络流量分析对互联网的发展、管理和应用具有重要义，以校园网为研究对象，对其网络流量的数据进行多次随机抽样构建踪迹文件测试数据集 。采用端口过滤和深层包检测技术对测试数据集进行分析，得到校园网中网带宽主要占有者的统计数据，为校园网络的管理提供参考。 随着互联网的快速发展，网络流量分析技术也取得了长足的进步。目前通用的网络流量分析技术主要包括SNMP技术、RMON技术、NetStream技术、sFlow技术、MPLS技术和NetFlow技术。网络流量分析技术在节省运营费用、优化网络结构、分析用户行为、评估网络价值、确定重点客户、实施安全预警等。本文研究的主要是采用Netflow技术。Netflow 是 Cisco 公司开发出的一套协议，用于与门解决原始流量方式所产生的问题。采样分析的结果数据会包括源地址、目的地址、源端口、目的端口、数据流的大小、数据流经过的接口、数据流的到达时间、数据流的送出时间等参数。 关键词：网络流量 Netflow原理及技术 用户行为 Network Traffic Analysis ABSTRACT Network traffic analysis for development of the Internet, has an important meaning and application management.To the campus network for the study, carried out its data network traffic trace file to build several random test data sets. Using port filtering and deep packet inspection technology to analyze the test data set, to get the campus network bandwidth occupied by the main statistical data, to provide a reference for the campus network management. With the rapid development of Internet, network traffic analysis techniques have made considerable progress. Currently general network traffic analysis techniques including SNMP technology, RMON technology, NetStream technology, sFlow technology, MPLS technology and NetFlow technology. Network traffic analysis techniques to save operating costs, optimize network structure, user behavior analysis to assess the value of the network to determine the key customers, the implementation of security and early warning. This paper is mainly used Netflow technology. Netflow is Cisco has developed a set of protocols for the door way to solve problems arising from the original flow. Sampling and analysis of the resulting data will pack tons of source address, destination address, source port, destination port, the size of the data stream, the data stream after the arrival time of the interface, data flow, data stream transmission time and other parameters. Key Words: Network Traffic Netflow Principles and Techniques User Behav