基于路由器的ICMP流量异常检测

ICMP Traffic Anomaly Detection Based on Router

针对使用ICMP(Internet ControlM essage Protocol)协议的网络病毒对网络性能影响日益严重的问题,利用路由器所处网络位置的优势,对流经路由器的ICMP数据包进行分析、统计,从中找出感染病毒主机的IP地址,并对其进行相应处理。经过实际应用结果表明,使用该方法可较为彻底地杜绝网络中ICMP数据包的大量泛滥,从而提高了网络的有效传输带宽。

According to the network virus that uses ICMP （Internet Control Message Protocol） protocol, the problem of increasingly serious influence for network performance uses the advantage of router. For analysing and making statistics the ICMP packets through router, find out the host＇s IP address that infected virus, and then carries out suitable handling. Pass a time of application, the result show that use this kind of method, it can prevent the ICMP pockets＇overflows in large quantities in network thoroughly and enhance effective transmission bandwidth of the network.