摘要
为改善目前网络基础研究领域对网络流量基础数据极度缺乏的现状,设计实现一套IP网络流量资源共享系统.系统使用了socket双通道的通信控制、Libpcap多线程网络流量捕获、环形循环缓存、文件矩阵网络流量存储、保留前缀的匿名化算法TCPdpriv以及Crypto-PAn流量匿名化等技术,设计了详细的测试方案针对系统各项功能和性能做了测试.测试结果表明,系统实现了千兆限速IP网络流量的捕获、存储、匿名化以及共享,为网络研究者对基础网络的研究以及网络设备厂商对设备的测试提供了基础数据.
In order to improve the current situation of the extremely lack of basic network traffic data in the field of network basic research,we design and implement a set of IP network traffic resource sharing system.We use technologies including socket dual-channel communication control,Libpcap multi-threaded network traffic capture,circular caching,file matrix network traffic storage,prefix-preserving anonymization algorithm TCPdpriv,and Crypto-PAn traffic anonymization.A detailed test plan is designed to test the functions and performance of the system.The test results show that the system has achieved the capture,storage,anonymization and sharing of gigabit speed-limited IP network traffic.The system can provide basic data for network researchers to study basic networks and network equipment manufacturers to test equipment.
作者
折波
王强
董凡
崔靖茹
覃遵颖
李国栋
钟晓歌
SHE Bo;WANG Qiang;DONG Fan;CUI Jingru;QIN Zunying;LI Guodong;ZHONG Xiaoge(Network Information Center,Xi'an Jiaotong University,Xi'an 710049,Shaanxi Province,P.R.China;State Key Laboratory of Astronautic Dynamics,Xi'an Satellite Control Center,Xi'an 710043,Shaanxi Province,P.R.China)
出处
《深圳大学学报(理工版)》
EI
CAS
CSCD
北大核心
2020年第S01期118-127,共10页
Journal of Shenzhen University(Science and Engineering)
基金
CERNET创新资助项目(NGII20190502,NGII20180203)。