Flow analysis method based on Linux core

Abstract

A flow analysis method based on Linux kernel is realized by the way of loading the kernel in Linux. The provided monitoring analysis target includes flow rate, link usability, 2-7 layer protocol distribution, rate of different protocols, packets distribution, which can monitor specific kind flows based on the definition rules of different flows and provide related statistic results.

Description

technical field [0001] The invention relates to the technical field of computer network traffic analysis, in particular to design a Linux kernel-based traffic analysis method. Background technique [0002] Traffic indicators are one of the most important indicators for network operation and maintenance, and are the basis for network planning and design, protocol design, service deployment, traffic engineering implementation, attack detection, and fault diagnosis. Through the monitoring and analysis of network traffic, a large amount of network performance information, network service status, and attacks or weaknesses in the network can be obtained. Passive traffic monitoring through packet capture and protocol analysis is the most commonly used method for traffic monitoring to obtain traffic indicators at each protocol level. [0003] In recent years, the network link rate has increased rapidly, and has begun to move from Mbit / s to Gbit / s, and may develop to 40Gbit / s or eve...

AI Technical Summary

Problems solved by technology

However, the use of network processors often requires dedicated equipment, the development cycle is long, and large-scale deployment is not realistic.

Images