The invention discloses a method and
system for realizing
IP address auditing based on
netflow traffic flow direction analysis, and the method comprises the steps: collecting the
netflow traffic of CMNET-MB and DCN-WGC equipment ports; carrying out sampling analysis and cleaning on the flow data; judging whether the unallocated IP has flow in
netflow or not by combining the cleaned data with a filing
system, filtering the IP, and defining the IP as a missed filing IP; judging whether the distributed IP has no flow for a long time in netflow or not according to the cleaned data in combination with a filing
system, filtering the IP, and defining the IP as a to-be-recycled IP; according to the city dimension, judging whether a missed
record IP and a to-be-recycled IP exist in the time period, and reversely checking the equipment and the port to which the IP belongs through the IP; and the
IP address analysis result is combined with the
IP address management of the filing system, the use condition of the current network IP address is audited, and each address is notified for notification. According to the method and the system, abnormal IPs, ports and equipment are accurately positioned in real
time based on the capabilities of data real-time acquisition, anomaly analysis, IP
backtracking and the like, and the IP address use condition of a current network is analyzed.