利用NetFlow技术构建网络异常监测及分析系统

Implementation of NetFlow-based Network Traffic Analysis and Abnormal Traffic Detection System

随着互联网的不断普及,网络已经跟人们的日常生活密不可分,使用者在享受网络所带来的便利的同时,网络上的许多问题也陆续衍生而出,运营商网络正面临着日益严重的安全威胁。作为网络管理者,如何迅速有效地监测网络异常情况,同时准确地掌握整个网络的业务流量模型,供市场部门作决策分析,已成为一项重要的课题。介绍了利用NetFlow技术,构建网络异常监测及分析系统,利用本系统可随时监测网络运行情况,以达到网络稳定顺畅运作及节省经费、人力的目的。

With the rapid development of Internet, the number of Internet service is continuous increasing along with the Internet uses, the reliability and security of these service have become more and more important for network operator, this paper has compared with several methods and techqiue of network traffic monitoring, and established a system based on NetFlow, this system is focused on IP backbone network with analyzing network traffic and detecting abnormal traffic.