NetFlow Packet Generator, Collector, and Real-time Traffic Monitor System

• Main Authors: Zhi-Hong Shi, 施志鴻
• Other Authors: Chien-Chun Su
• Format: Others
• Language: zh-TW
• Published: 2003
• Online Access: http://ndltd.ncl.edu.tw/handle/90697495058563115217

碩士 === 南台科技大學 === 資訊管理系 === 91 === In this paper, we design and implement a real-time Netflow monitor system which consists of three parts: (1) Netflow packet generator, (2) Netflow packet collector, and (3) web-based real-time traffic monitor. After capturing packets from a mirror port of a router, the Netflow generator can produce the packets of Cisco Netflow v5 and solve the problem of some routers not exporting Netflow packets. To reduce the packet loss, we use the multi-thread techniques and shared-memory structure. Also, a special structure of linked list is designed for counting the Netflow packets. We investigate various hashing functions to improve the searching efficiency of linked list. Based on our experiment, the proposed Netflow generator works well with other Netflow collector such as cflowd. The real time traffic monitor is implemented by using PHP and MySQL. It supports IP traffic usage statistics and profiling information.