Network flow tracing system and method based on OpenFlow technology

Abstract

The invention provides a network flow tracing system and method based on the OpenFlow technology. The system at least comprises a search module which is used for breadth-first search in network topology, so as to determine the sending position of a flow probe. The system also comprises a probe sending module which is used for sending the flow probe on a corresponding switcher based on the sending position determined by the search module, a probe verification module which is used for data package processing so as to judge whether the flow probe detects a target flow or not, and a scheduling module which is used for the integrated scheduling of the search module, the probe sending module and the probe verification module so as to achieve the task of flow tracing, thereby achieving the quick and high-efficiency flow tracing in an OpenFlow switcher network. The probe sending module and the probe verification module can support OpenFlow protocol in a plurality of versions, so as to achieve the interaction with different switchers.

Description

technical field [0001] The invention relates to the field of network traffic traceability, in particular to a network traffic traceability system and method based on OpenFlow technology. Background technique [0002] Although there are some relatively mature technologies that can be used to prevent some network attacks, such as intrusion detection systems that can detect network attacks, and firewalls that can block some attacks, none of them can identify the source of the attack. On the other hand, while DoS attack technology is developing rapidly, the mechanism to deal with it is still limited to filtering out suspicious traffic and "tolerating" the attack by mitigating the impact on victims. Therefore, people began to study another solution, locating the source of the attack through the computer network, and preventing the attack from happening at the source. This is the computer network traffic traceability technology. [0003] Since the current TCP / IP protocol does not...

AI Technical Summary

Problems solved by technology

However, there is still no network traffic traceability system that can be truly deployed, because most of the existing technologies require changes to the network, such as adding router functions, or even changing the packet structure

Images