基于Linux的IPv6网络流量测量系统的设计与实现
|
摘要
随着互联网的高速发展，各种新的网络应用不断涌现，网络带宽的需求不断增加。P2P技术为核心的多种应用占用大量网络带宽，网络拥挤不堪，用户希望了解流量构成，识别网络中各种流量。当前，许多应用或协议使用不确定端口、非标准端口和共享端口等，这样网络流量已不能简单地通过查看端口信息来识别了。随着IPv6网络正在广泛部署，IPv6网络也带来了新的问题。基于以上原因，需要我们去研究IPv6网络环境下的流量测量技术。
本论文给出一个IPv6网络流量测量的方案，前三章介绍了网络测量的基本概念、分类、意义以及IPv6网络环境下的网络流量测量系统框架。第四章中讨论了IPv6网络流量测量系统的数据采集模块，涉及到数据采集的一般处理方法、IPv6数据捕获及数据存储设计。接下来的第五章着重讨论了数据分析模块的设计，这里详细介绍了网络层分析和应用层分析思路，重点对应用层分析所使用的L7-filter及其模式文件定义作了介绍。第六章介绍了数据显示模块，此部分涉及到两种显示方式，包括命令行方式和web方式。第七章着重阐述了测试环境的搭建和测试结果分析。最后在第八章中总结了IPv6网络流量测量实现的技术特点，并对IPv6网络流量测量系统进一步研究提出了展望。
With the rapid development of Internet, new type network applications are emerging continually and the demand of network bandwidth is increasing. A variety of applications based on Peer-to-Peer technology use up a lot of network bandwidth. So, network overcrowded and users hope to understand the component of the traffic and identify all kinds of network traffic. Currently, many applications and protocols use unpredictable ports, non-standard ports or ports shared other protocols. It is impossible to identify network traffic by simply detecting the number of ports. IPv6 network are widely deployed and bring some new problems. For the above reasons, we need to study the traffic measurement based on IPv6 network environment.
This paper provides a solution to measure IPv6 network traffic. The three preceding chapters introduce the basic concepts, classification and significance of the network measurement and the framework of the traffic measurement based on IPv6 network environment. The fourth chapter discusses the data collection module, which involved with the general approach of data collection, data capture in IPv6 network environment and data storage. Next, the fifth chapter focuses on the design of data analysis module. The ideas of the analysis from the network layer and the application layer are discussed in detail. Foremost, we explain L7-filter and pattern definition file. The sixth chapter introduces the data display module, which use the command line mode and the web mode. The seventh chapter focuses on the setting-up of the testing environment and the results and analysis of testing. Finally, the eighth chapter sums up the technical characteristics of the network traffic measurement and gives some considerations for further study.
本论文给出一个IPv6网络流量测量的方案，前三章介绍了网络测量的基本概念、分类、意义以及IPv6网络环境下的网络流量测量系统框架。第四章中讨论了IPv6网络流量测量系统的数据采集模块，涉及到数据采集的一般处理方法、IPv6数据捕获及数据存储设计。接下来的第五章着重讨论了数据分析模块的设计，这里详细介绍了网络层分析和应用层分析思路，重点对应用层分析所使用的L7-filter及其模式文件定义作了介绍。第六章介绍了数据显示模块，此部分涉及到两种显示方式，包括命令行方式和web方式。第七章着重阐述了测试环境的搭建和测试结果分析。最后在第八章中总结了IPv6网络流量测量实现的技术特点，并对IPv6网络流量测量系统进一步研究提出了展望。
With the rapid development of Internet, new type network applications are emerging continually and the demand of network bandwidth is increasing. A variety of applications based on Peer-to-Peer technology use up a lot of network bandwidth. So, network overcrowded and users hope to understand the component of the traffic and identify all kinds of network traffic. Currently, many applications and protocols use unpredictable ports, non-standard ports or ports shared other protocols. It is impossible to identify network traffic by simply detecting the number of ports. IPv6 network are widely deployed and bring some new problems. For the above reasons, we need to study the traffic measurement based on IPv6 network environment.
This paper provides a solution to measure IPv6 network traffic. The three preceding chapters introduce the basic concepts, classification and significance of the network measurement and the framework of the traffic measurement based on IPv6 network environment. The fourth chapter discusses the data collection module, which involved with the general approach of data collection, data capture in IPv6 network environment and data storage. Next, the fifth chapter focuses on the design of data analysis module. The ideas of the analysis from the network layer and the application layer are discussed in detail. Foremost, we explain L7-filter and pattern definition file. The sixth chapter introduces the data display module, which use the command line mode and the web mode. The seventh chapter focuses on the setting-up of the testing environment and the results and analysis of testing. Finally, the eighth chapter sums up the technical characteristics of the network traffic measurement and gives some considerations for further study.
引文
[1] IP Performance Metrics Working Group(IPPM), http://www.ietf.org/html.charters/ippm-charter.html, 2006.
[2] Towards a systemic understanding of the Internet organism: a framework for the creation of a Network Analysis Infrastructure, http://moat.nlanr.net/NAI/,1998.
[3] Andrew Adams, Jamshid Mahdavi, Matthew Mathis, Vern Paxson. Creating a Scalable Architecture for Internet Measurement. http://www.psc.edu/networking/papers/nimi.html, 2001.
[4] CAIDA Measurement and Analysis Tools, http://www.caida.org/tools/measurement/,2006.
[5] The PingER Project, http://www-iepm.slac.stanford.edu/pinger/, 2006.
[6] Srinivasan Seshan, Mark Stemm, Randy H. Katz. SPAND: Shared Passive Network Performance Discovery. http://citeseer.ist.psu.edu/seshan97spand.html,1997.
[7] 张宏莉，方滨兴，胡铭曾等，Internet测量与分析综述，软件学报，2003．
[8] Wand Network Research Group. http://wand.cs.waikato.ac.nz/, 2007
[9] 王继龙，吴建平，大规模计算机互联网络性能监控模型的设计与实现，计算机研究与发展，2000．
[10] 张文杰，钱德沛，张然等，互联网应用性能测量系统的研究与实现，计算机研究与发展，2003．
[11] 第19次中国互联网络发展状况统计报告，http://www.cnnic.net.cn/，2007.
[12] Richard Stevens，Unix网络编程第1卷(第2版)，清华大学出版社，2001．
[13] 孙贤淑，IP网络流量测量的研究与应用，北京邮电大学学位论文，2005．
[14] 刘文涛，网络安全开发包详解，电子工业出版社，2005．
[15] 李振强，赵晓宇，马严等，IPv6技术揭秘，人民邮电出版社，2006．
[16] Application Layer Packet Classifier for Linux, http://17-filter.sourceforge.net/，2007.
[17] 崔滔，陈自力，命令行接口管理系统的研究与实现，计算机应用，2002．
[18] RRDtool, http://oss.oetiker.ch/rrdtool/doc/rrdtool.en.html, 2007.
[19] GD Library, http://www.libgd.org, 2007.
[20] SendIP, http://www.earth.li/projectpurple/progs/sendip.html, 2003.
[21] 王鲲鹏，IPv6入侵检测系统的实现及性能优化，北京邮电大学信息网络中心，学位论文，2006．
[2] Towards a systemic understanding of the Internet organism: a framework for the creation of a Network Analysis Infrastructure, http://moat.nlanr.net/NAI/,1998.
[3] Andrew Adams, Jamshid Mahdavi, Matthew Mathis, Vern Paxson. Creating a Scalable Architecture for Internet Measurement. http://www.psc.edu/networking/papers/nimi.html, 2001.
[4] CAIDA Measurement and Analysis Tools, http://www.caida.org/tools/measurement/,2006.
[5] The PingER Project, http://www-iepm.slac.stanford.edu/pinger/, 2006.
[6] Srinivasan Seshan, Mark Stemm, Randy H. Katz. SPAND: Shared Passive Network Performance Discovery. http://citeseer.ist.psu.edu/seshan97spand.html,1997.
[7] 张宏莉，方滨兴，胡铭曾等，Internet测量与分析综述，软件学报，2003．
[8] Wand Network Research Group. http://wand.cs.waikato.ac.nz/, 2007
[9] 王继龙，吴建平，大规模计算机互联网络性能监控模型的设计与实现，计算机研究与发展，2000．
[10] 张文杰，钱德沛，张然等，互联网应用性能测量系统的研究与实现，计算机研究与发展，2003．
[11] 第19次中国互联网络发展状况统计报告，http://www.cnnic.net.cn/，2007.
[12] Richard Stevens，Unix网络编程第1卷(第2版)，清华大学出版社，2001．
[13] 孙贤淑，IP网络流量测量的研究与应用，北京邮电大学学位论文，2005．
[14] 刘文涛，网络安全开发包详解，电子工业出版社，2005．
[15] 李振强，赵晓宇，马严等，IPv6技术揭秘，人民邮电出版社，2006．
[16] Application Layer Packet Classifier for Linux, http://17-filter.sourceforge.net/，2007.
[17] 崔滔，陈自力，命令行接口管理系统的研究与实现，计算机应用，2002．
[18] RRDtool, http://oss.oetiker.ch/rrdtool/doc/rrdtool.en.html, 2007.
[19] GD Library, http://www.libgd.org, 2007.
[20] SendIP, http://www.earth.li/projectpurple/progs/sendip.html, 2003.
[21] 王鲲鹏，IPv6入侵检测系统的实现及性能优化，北京邮电大学信息网络中心，学位论文，2006．