基于时隙组的网络流追踪研究与实现

Research on network flow tracking method based on time interval group

当前网络流追踪技术存在鲁棒性差、同步机制脆弱问题,提出了一种基于时隙组的网络流追踪方法。该方法将流持续时间划分为若干相同长度时隙,每相邻3个时隙构成1组,通过清空该组中第1或第2个时隙内数据包来表示0或1,以实现特殊标记信息在流内的隐藏,同时,采用时间偏移量指示同步位置,以便接收端准确恢复出该特殊标记信息。实验结果表明,该方法不仅能呈现准确的同步性,而且与其他方法相比,在大流量网络环境下表现出更强的鲁棒性。

In order to solve the problem of poor robustness and vulnerable synchronization of current network flow tracking techniques,a network flow tracking scheme based on the time interval group（NFTIG）is proposed.The duration of network flow is divided into many time intervals with equal length,then three adjacent time intervals constitute one group.0or 1can be indicated by clearing all packets in the first or second time interval of the group.Through doing this,the special mark information can be hidden in the network flow.Meanwhile,an offset from the starting moment of the flow is used to indicate synchronous position.This offset can help receiver decode the special mark information easily and accurately.The experimental results show that,compared with other existing methods,the NFTIG presents not only exact synchronization,but also better robustness even under heavy network traffic load.