SDN based user-defined data packet sampling method

Abstract

The invention discloses an SDN based user-defined data packet sampling method. The SDN based user-defined data packet sampling method comprises the step of 1) setting a sampling module in a controller, and configuring an appointed switch by the controller based on sampling configuration information sent by an upper-layer application; 2) when the controller receives a sampling start instruction sent by the upper-layer application, sending the sampling start instruction to the appointed switch; 3) when the switch receives the sampling start instruction, starting a set timer, sieving each data packet based on configuration to obtain data packets meeting a matching rule, then extracting needed content from the sieved data packets according to a configured sampling mode and outputting the needed content to an appointed port; and 4) when the controller receives a sampling stop instruction sent by the upper-layer application, sending the sampling stop instruction to the appointed switch based on the sampling start instruction, and when the switch receives the sampling stop instruction, stopping sampling and cancelling the timer. The SDN based user-defined data packet sampling method not only guarantees more accurate sampling content, but also can reduce the size of the data packets to the maximum extent.

Description

technical field [0001] The invention belongs to the field of computer networks, relates to a sampling method, and more specifically relates to an SDN-oriented self-defined data packet sampling method. Background technique [0002] The purpose of network data packet sampling is to obtain network status information with a small amount of information, monitor network communication, and deal with some abnormal situations in the network. Nowadays, with the rapid popularization of the Internet and the frequent occurrence of network attacks, protection The operational security of the network has also become another important purpose of data packet sampling and monitoring. In the existing traditional network, information is usually collected from data packets through data mirroring or according to a defined protocol format. In addition to complex configuration of the switch or additional hardware support for sampling, the data packets obtained by sampling and the required informatio...

AI Technical Summary

Problems solved by technology

In the existing traditional network, information is usually collected from data packets through data mirroring or according to a defined protocol format. In addition to complex configuration of switches or additional hardware support, sampling of data packets and required information In contrast, or due to the limitation of the protocol format, the sampling content cannot be flexibly defined, resulting in inaccurate sampling data and taking it on demand, resulting in too large data packets, and the data part contains a lot of useless information, resulting in a large a

Images