Intelligent analysis, alarm and positioning method and monitoring system for NAT (Network Address Translation) traffic big data of large backbone intranet

Abstract

The invention discloses a large backbone intranet NAT traffic big data intelligent analysis alarm positioning method and a monitoring system, and the method comprises the following steps: analyzing an NAT device I P, carrying out the comprehensive comparison scanning of the I P of an entry point and an exit point of the NAT traffic, and forming an independent I P address through the same traffic; a white list is self-defined, a white list item is established, and the traffic equipment IP used in the intranet is stored in a white list; classifying and marking the IP, classifying and marking the scanned IP, realizing the distinguishing between the intranet IP and the external connection IP, and generating flow data for the external connection IP obtained by distinguishing; the method has the beneficial effects that different IPs are regularly detected and marked, so that the compliance IP and the violation IP are distinguished; and positioning and marking the violation IP, and generating a violation data table graph to carry out jacking transmission early warning on a specified user.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a large-scale backbone intranet NAT traffic big data intelligent analysis and alarm positioning method and a monitoring system. Background technique [0002] NAT refers to network address translation. When some hosts in the private network have already been assigned local IP addresses, but want to communicate with hosts on the Internet, the NAT method can be used. This method requires the private network to connect to the Internet. Install NAT software on the router. A router equipped with NAT software is called a NAT router. It has at least one valid external global IP address. In this way, all hosts using local addresses must use their local addresses to communicate with the outside world on the NAT router. The address is converted into a global IP address in order to connect to the Internet. [0003] The work of the router itself is only responsible for converti...

AI Technical Summary

Problems solved by technology

[0003] The work of the router itself is only responsible for converting the addresses of the devices it is connected to, but when the device IP is connected to the router, the illegal external IP from the outside also has the problem of connecting to the router, which not only increases the number of IPs converted by the router, but also occupies the network. Traffic has formed a certain burden, so a large-scale backbone intranet NAT traffic big data intelligent analysis alarm location method and monitoring system are proposed

Images