A two-dimensional network active node measurement method for integrated packets and flows

A two-dimensional network and measurement method technology, applied in data exchange network, digital transmission system, electrical components, etc., can solve the problem of unrepresentative measurement results, reduce equipment resource overhead, reduce the number of messages, and improve estimation accuracy Effect

Inactive Publication Date: 2017-06-16
SOUTHEAST UNIV
View PDF2 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

If only a single-dimensional attribute of the host node is selected for judgment and analysis, and the effects of other attributes of the host node are completely ignored, the measurement results will not be representative, and the problem that requires comprehensive network security analysis cannot be solved.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A two-dimensional network active node measurement method for integrated packets and flows
  • A two-dimensional network active node measurement method for integrated packets and flows
  • A two-dimensional network active node measurement method for integrated packets and flows

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0028] A two-dimensional network active node measurement method that integrates messages and flows,

[0029] Step 1. Set up a network flow. Each of the network flows is composed of a packet set with the same source IP address, sink IP address, source port, and sink port. A size of 2 is set. N The bit vector B, N is a positive integer greater than 1, all 2 in the bit vector B N The initial value of the bit is set to 0, and an IP address set I is set. The initial setting of the IP address set I is empty, and each element in the IP address set I is composed of a structure of IP address, flow number, and message number. Flow number fn, message number pn, the initial values ​​fn and pn are set to 0 respectively, set the network flow sampling rate to fs, the value range of fs is greater than 0 and less than or equal to 1, set the message sampling rate to ps, and ps is taken as The value range is greater than 0 and less than or equal to 1. Set the attribute threshold value rate of t...

Embodiment 2

[0041] A method for measuring network active nodes based on multidimensional attributes,

[0042] Step one (1), set network flow, described each network flow is made up of the message collection with identical source IP address, sink IP address, source port, sink port, set a size to be 2 10 The bit vector B of the bit vector B, the initial value of all 1024 bits in the bit vector B is set to 0, an IP address set I is set, the initial setting of the IP address set I is empty, and each element in the IP address set I consists of IP address, flow The structure of the number and the number of packets, set the number of network flows fn, the number of packets pn, the initial values ​​fn and pn are set to 0, set the network flow sampling rate fs, the value of fs is 1 / 2, set the packet The sampling rate is ps, the value of ps is 1 / 2, the value rate of the attribute threshold of the network node is set to H, and the value of H is 1 / 10, the measurement duration is set to T, T is 10, an...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

Provided is a comprehensive message and flow two-dimensional network active node measuring method. The method includes the steps that a network flow sampling rate and a message sampling rate are set, when a message reaches a measurement device, flow information is extracted from a message header, then, network flow sampling and message sampling are performed, state information of the network flow is maintained through a bit vector B, network flow number compensation is carried out for Hash conflict existing in the bit vector B, the network flow number and the message number of sampled IPs are stored through a Hash linked list structure. After the measurement period is ended, whether the IPs are active nodes or not is judged by calculating the statistics information of each IP address. Due to the method, two different active nodes based on the message and the network flow can be measured at the same time. According to the method, the network flow and the message are respectively sampled for data flow, and the method can be applied to network active node measurement in a high-speed network environment.

Description

technical field [0001] The invention relates to the technical field of network measurement, in particular to a two-dimensional network active node measurement method that integrates messages and streams. Background technique [0002] An active node refers to the source IP address or sink IP address whose number of packets or flows generated by the IP exceeds the threshold. However, the current active node detection method can only detect active nodes according to the number of packets, or detect active nodes according to the number of flows. node. The invention proposes an active node capable of detecting the number of messages and the active node of the flow at the same time. [0003] High-speed network traffic detection and analysis and research on corresponding behaviors can provide network managers with key management information such as current network performance, load, and potential failures. With the continuous enrichment of network applications and the continuous...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L12/26H04L29/06
Inventor 程光
Owner SOUTHEAST UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products