Method and system for monitoring network flows

Abstract

The embodiments of the present invention relate to a method and system for monitoring network traffic. The method of the embodiments of the present invention includes: counting the number of times a uniform resource locator (URL) is requested within a pre-determined time period to determine a hotspot URL; actively capturing the resources corresponding to the hotspot URL; performing protocol regrouping on the actively captured resources corresponding to the hotspot URL; and analyzing the contents of the protocol regrouped data. Also provided is a system for monitoring network traffic. The embodiments of the present invention can effectively reduce the overhead of protocol regrouping and background content analysis, improve the efficiency of the entire system, and lower the system costs; additionally, for distributed P2P resources, intelligent regrouping can be performed, and P2P monitoring is also supported.

Description

technical field [0001] The present invention relates to the field of the Internet (Internet), and more specifically, to the monitoring of data flow in the Internet. Background technique [0002] With the rapid development of the Internet, the Internet has become the main channel for information dissemination. However, the traditional Internet lacks supervision, malicious / pornographic / personal attack information is flooding, and there have even been cases of terrorist organizations using the Internet to train terrorists and organize terrorist attacks. In order to deal with this bad situation, it has become the consensus of governments and operators of various countries to use technical means to supervise the Internet. The traffic monitoring system came into being under such background. The traffic monitoring system collects traffic information, restores the original information, and conducts intelligent analysis based on the characteristics of the original information, so a...

AI Technical Summary

Problems solved by technology

[0004] However, in the above-mentioned prior art, the drainage classification unit is passive drainage, and the data of large flow is directly imported into the protocol reorganization unit and the background content analysis unit

With the growth of traffic, the processing cost of the server cluster in the protocol reorganization unit and the background content analysis unit will increase significantly

[0005] Secondly, the background content analysis function is completed after the protocol reorganization, so that a large amount of the same content is repeatedly reorganized, resulting in a great demand for the performance of the protocol reorganization unit

[0006] In addition, the above-mentioned traditional traffic monitoring method can only obtain part of the peer-to-peer network (Peer-To-Peer, P2P for short) file fragments and cannot intelligently link other P2P file fragments, so it cannot handle peer-to-peer network traffic monitoring

Images