Complex network traffic packet smart analysis system

Abstract

The invention provides a complex network traffic packet smart analysis system, comprising a network condition real-time monitoring module which is used for monitoring a plurality of dimensions: sessions, applications and IPs, storing corresponding data and drawing a visual ranking graph and tend graph, wherein a network manager can conveniently and clearly understand current network condition; andan alarm module which is used for sending out alarm for data which exceeds baseline thresholds in network indexes and recording the alarm to a database, wherein the system automatically carries out learning and induction according to configured statistics time, carries out comparison with history condition and dynamically updates the baseline thresholds based on a smart network risk monitoring algorithm. According to the system, network data of different types is analyzed uniformly, a one-stop solution in a complex network is supported, and a plurality of sets of different collectors do not need to be deployed when various pieces of different network traffic data are coped.

Description

technical field [0001] The invention relates to an intelligent analysis system, in particular to an intelligent analysis system for complex network traffic packets. Background technique [0002] With the development of the network in terms of scale, speed and capacity, network managers have higher and higher requirements for the monitoring and management of big data network flows. There may be data packets in various formats during use. Deploying multiple sets of monitoring equipment not only requires high implementation and maintenance costs, but also faces various problems in the analysis and presentation of monitoring data in the later stage. [0003] Most of the network flow analysis systems currently on the market analyze specific types of network flow data packets, for example, analyze only for Netflow or only for Sflow. For a resolver that only supports one type, if there are network packets that it does not support in the deployed network environment, this part of t...

AI Technical Summary

Problems solved by technology

For a resolver that only supports one type, if there are network packets that it does not support in the deployed network environment, this part of the network flow data is easily out of the scope of monitoring, resulting in the loss of final data

In order to obtain complete data monitoring results, the existing solution may need to deploy another set of specialized analyzers

Images