Design and implementation of IP network behaviour analysis system based on NetFlow

  • Huihui Hou*
  • , Tongge Xu
  • , Rongbo Zou
  • *Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

The high-speed development of the Internet has brought up a huge challenge for network management. Larger network traffic and more complex applications make it difficult for the original SNMP-based network management software to meet demands of analyzing users and protocols; widespread utility of dynamic ports greatly reduces the accuracy of distinguishing application layer protocols based on tranditional static ports. Since raw NetFlow is enormous, unfit for long-term storage and low in query efficiency, multiple time granularity aggregation schemes are designed. This paper describes characteristics of both real-time and history traffic from five aspects, thus providing a clearer view of network operating conditions. Besides, as the indicator of users' web access behavior, web sites and URLs are analyzed.

Original languageEnglish
Title of host publicationProceedings of the 2012 12th International Conference on Intelligent Systems Design and Applications, ISDA 2012
Pages533-538
Number of pages6
DOIs
StatePublished - 2012
Event2012 12th International Conference on Intelligent Systems Design and Applications, ISDA 2012 - Kochi, India
Duration: 27 Nov 201229 Nov 2012

Publication series

NameInternational Conference on Intelligent Systems Design and Applications, ISDA
ISSN (Print)2164-7143
ISSN (Electronic)2164-7151

Conference

Conference2012 12th International Conference on Intelligent Systems Design and Applications, ISDA 2012
Country/TerritoryIndia
CityKochi
Period27/11/1229/11/12

Keywords

  • aggregation
  • traffic analysis
  • user access behaviour analysis

Fingerprint

Dive into the research topics of 'Design and implementation of IP network behaviour analysis system based on NetFlow'. Together they form a unique fingerprint.

Cite this