构建“切片式”监控系统保障电信运营网络安全

Provide ISP Security by Sliced Network Monitoring System

如何通过网络监控系统来保障运营商网络安全,特别是在大规模的电信运营商网络中进行集中式的网络监控一直是困扰运营商维护人员的难题。目前的监控手段都存在着一定的局限性,无法从根本上解决问题。本文通过综合运用SNMP采样、NETFLOW分析和探针分析,并且利用JUNIPER路由器特有的端口镜像功能将这三种手段有效地结合起来,构造出一种“切片式”监控系统,可以较好地完成粗、细粒度结合的电信网络集中监控任务,从而为保障电信运营商网络安全打下一个坚实的基础。

How to ensure service provider＇s network Becurity through network monitoring system, especially how to use centralized monitoring in an extensive Internet service provider＇s system has been a teugh problem that always puzzle the edministrators. Current monitoring measures all limited in a certain aspect that prevent them from solving the problem ultimately. Through integrating the SNMP sampling, NetFlow analysis, probe analysis, and the unique port mirroring function of Juniper router, this paper is going to present a ‘sliced＇monitoring system, which is more effective in both detailed and summarized analysis, so that to laid a stable foundation for further research and operation to Internet service provider.