校园网网络行为实时监测系统.pdfVIP

摘 要 本文设计了一个比较完善的分层式校园网网络行为实时监测系统，并对其各 模块的功能和实现方法进行了分析与描述。在网络数据的采集方式上，采取了一 种基于sFlow的采集技术与基于“包捕获”的采集技术相结合的数据信息采集结 构。而在网络行为分析方面，采用了协议分析技术对采集到的数据包进行数据分 析以得到各种不同的流量信息；采用了模式匹配技术和协议分析技术相结合的方 法来完成对异常行为的实时检测。 此系统可以使管理者实时地监测到校园网内部用户的网络行为信息，且对规 模日益庞大、速度越来越快的高校校园网建设具有一定的参考意义。 关键词：网络行为分析，网络监测，协议分析 ABSTRACT This paper presents a rather perfect solution for the real-time and improved hierarchical network-behavior monitoring system, analysis and describe in detail the function and implementation method of each sub module of the system. With regard to the acquisition mode of network data, the structure of data acquisition combining the sFlow-based acquisition technique with the Packet Capture-based acquisition technique is used. With regard to the analysis of network behaviors, this paper applies the technique of protocol analysis to give an analysis of data to the acquired data packets, so that we can get the detailed traffic information; and the paper applies the method of combining the technique of pattern matching with the technique of protocol analysis to monitor the real-time detection of abnormal behaviors. This system can make the administrator real-time monitor the information on the network behaviors of internal users in the campus network, and give some references for the construction of the campus networks in colleges that become increasingly large in scale and progressively faster in speed. Cai Zhen(Computer Application Technology) Directed by prof. Zhu Yongli KEY WORDS: network behavior analysis,network monitoring,protocol analysis 目 录 中文摘要 英文摘要 第一章 引言…………………………………………………………………1 1.1 课题研究背景和意义… ……………………………………………1 1.2 国内外相关技术的研究现状…… ……………………………………2