一种流方式的UDP测量系统的设计与实现

Implementation and Design of UDP Flow Measurement System

近年来迅猛发展的P2P、流媒体、网络游戏等UDP新应用占总流量的比重越来越大,这些UDP数据没有TCP数据本身的流的标识,也没有流开始的握手和流结束时候的Reset包。面向高速网络环境,提出一种流方式的UPD系统(FlowUDP)的思路。该系统考虑骨干网络中UDP流的单向特性,使用了winpcap捕包技术。系统包括网络数据包捕获模块、数据包重放模块、数据包拼流模块、UDP分析模块,同时采用stl中的map模板类,通过自定义高效的比较函数,提高了UDP数据包性能,从而提高系统运行效率。针对复杂网络环境下的数据特点,系统采用分步骤小工具设计方式,方便系统扩充新的分析功能。通过一个骨干网数据集和两个DARPA1999数据集,可以看出,UDP数据流的总体发展是占网络带宽越来越多,而且小的UDP流比较多,网络带宽发展越来越快,UDP流的平均时间越来越短。

In recent years, the rapid development of P2P, streaming media, network games and new application of UDP play an important role in the current Internet. These UDP data have not TCP flow identification itself, nor the flow started handshake and the reset packets of the flow over. The UDP flow measurement system is studied. A FlowUDP idea is pro- posed for high-speed network environment. The system considered the one-way characteristic of UDP flow in backbone net- work, used the minpcap packet capture technology. The system included network packet capture module, packet replay module, packet spell flow module and UDP analysis module~ and adopted the map template classes in stl to improve the performance of UDP data packet through a comparison function of efficient custom, so as to improve the efficiency of the sys- tem. According to the data characteristic of complex network environment, the system adopted the step small tools design way to expand a new analysis function. Three data sets （a backbone data sets and two DARPA1999 data sets） show that the over- all development of UDP data flow is the network bandwidth is increasing, and small UDP flow is more, network bandwidth development is more and more quickly, the average time of UDP flow is shorter and shorter,