基于Socket的网络通信流量异常监测方法

Abnormal Monitoring Method of Network Communication Traffic Based on Socket

为了提高网络通信流量异常监测结果的时效性以及监测水平,优化客户端体验,提出一种基于Socket的网络通信流量异常监测方法。引进Socket技术,通过对网络通信的请求,建立多端之间的有效通信连接;通过计算数据包占用网络通信流量字节多少,提取通信流量特征,按照数据库的标准化构建方式,建立一个针对网络通信流量的经验库;引进分级监测技术,按照特征行为匹配监测、指数平滑监测、流量曲线比对监测3种模式,实现网络通信流量的异常监测。通过对比实验证明,设计的基于Socket的监测方法,在进行网络通信流量异常监控时,反馈结果具有更高的时效性,可满足终端对通信流量监控的实时性需求。

In order to improve the timeliness and monitoring level of network traffic anomaly monitoring results and optimize the client experience, a network traffic anomaly monitoring method based on socket is proposed. Socket technology is introduced to establish an effective communication connection between multiple terminals through the request for network communication;By calculating the number of bytes of network communication traffic occupied by data packets, the characteristics of communication traffic are extracted, and an experience base for network communication traffic is established according to the standardized construction method of database;Hierarchical monitoring technology is introduced to realize abnormal monitoring of network communication traffic according to three modes: characteristic behavior matching monitoring, exponential smoothing monitoring and traffic curve comparison monitoring. Through comparative experiments, it is proved that the designed monitoring method based on socket has higher timeliness in the abnormal monitoring of network communication traffic, and can meet the real-time requirements of terminal for communication traffic monitoring.