網(wǎng)關(guān)條件下數(shù)據(jù)流統(tǒng)計(jì)工具的分析與實(shí)現(xiàn).pdf

1、北京交通大學(xué)碩士學(xué)位論文網(wǎng)關(guān)條件下數(shù)據(jù)流統(tǒng)計(jì)工具的分析與實(shí)現(xiàn)姓名：陳崗山申請(qǐng)學(xué)位級(jí)別：碩士專業(yè)：軟件工程指導(dǎo)教師：胡九川20090601j絲塞窒道厶堂童些亟堂僮詮塞△旦墨!叢鰻ABSTRACTABSTRACT：WiththedevelopmentofInteme喧andcomputertechnologynetworkisenteringallaspectsofsociallifeandnetworktraffichasincrease

2、dalotAtthesametime，thespreadofthevirusandmaliciousattacksthreattothenetworksecurityInordertoprotectnetworksecurityandefficientoperation，networkperformancemeasurementisbecomingincreasinglyimportantNetworkpackettrafficmoni

3、toringisanimportantbasisforperformancemeasurementTherefore，theresearchanddevelopmentofnetworktrafficmonitoringsystemhasgreattheoreticalandpracticalsignificanceThenetworktrafficstatisticaltoolsdiscussedinthispaperbasedont

4、heLinuxplatformWiththein—depthreachoftheNetfilterframeworkonLinuxkernel24，thispaperdemonstratedthedesignandimplementationofthenetworktrafficstatisticaltoolsAfteranalyzingthesystemdataflowdiagram，thepaperputforwardthreeki

5、ndsofpossibleoptions，basedondifferentfunctionsThesystemshouldhavereal—time，highperformancecharacteristicsThroughfullcomparisonoftheadvantagesanddisadvantagesofvariousoptions，thepaperproposedaframeworkandfollowedbythedeta

6、ilsofthesubmodulesSystemWasdesignedundermodularthinkingThesystemisdividedintopacketinspection，packetcaptureandthecontrolofthesystemthreepartsThecharacteristicsareequalwiththeruleset，andtherulesetcorrespondstothefunctiong

7、roupsBasedonthis，thepaperhasdesignedastructureofthematchingfunctionRelyingonthisstructure，it’SeasytolinkthefunctionsinthepacketinspectionmoduleandthepacketcapturemoduleAndtheUSercandevelopmentthroughtheinterfaceprovidedI

8、nthepacketcapturemodule，we，notonlyconsideredthealgorithmiccomplexitybutalsotakeintoaccountthepossibleimpactofthefirewall，putforwardthecorrespondingsolutionsInordertoovercomethebottleneckcausedbynmningonthegatewaythesyste

9、memployedadvancedtechnologiestomakeupfortheshortcoming，suchasrunninginkernelspace，multiprocess，multithreadsandefficientkernelspaceandUSerspacedataexchangeetcKEYWORDS：Gateway；PacketInspection；Netfilter；Linux；KernelProgram