A real-time monitoring and analysis of p2p behavior in the network- A Case Study of TamKang University

碩士 === 淡江大學 === 資訊管理學系碩士班 === 97 === P2P (Peer-to-Peer) software tool for peer-to-peer communication and transmission that allow users directly connect to other’s computer with sharing and exchanging files all over the world. As a result of the implementation of P2P software often occupy a lot of ba...

Full description

Bibliographic Details
Main Authors: Chun-Cheng Huang, 黃俊程
Other Authors: 黃明達
Format: Others
Language:zh-TW
Published: 2009
Online Access:http://ndltd.ncl.edu.tw/handle/05734373908643488393
Description
Summary:碩士 === 淡江大學 === 資訊管理學系碩士班 === 97 === P2P (Peer-to-Peer) software tool for peer-to-peer communication and transmission that allow users directly connect to other’s computer with sharing and exchanging files all over the world. As a result of the implementation of P2P software often occupy a lot of bandwidth. The transmission of the files with virus may infect other’s computer. User could transfer illegal software or files through the internet. Although the log files in the current network equipments supply the manager with information, the log file can only provide posterior investigation but not the real-time monitor. In our research, we apply AceNet, a kind of bandwidth controlling equipments, to recognize the user’s behavior in Tamkang University, and establish a management platform that provide real-time monitor the state of the use of P2P. In this case, we found that the most commonly used P2P software are BT, PPStream, ClubBox and eDonkey. BT software provides users with each other due to transfer newer files, so for the largest number of use. The number of the P2P software to connect the number of each flow is relative. Such as, the higher the number of connect, the lower the number of data-flow in each connect. On the one hand the lower number of connections can reduce the load of users upload, on the other hand the user’s hard disk access frequency will be increased easily damage the hard disk. In the flow part, the main flow of the school occupied by certain departments and the flow of these departments are primarily occupied by one or two IP (Internet Protocol). In the weekly traffic analysis, we found that the traffic of weekend is higher than the traffic of Wednesday or Thursday. The main reason is a small number of IP at the weekend in full swing mount P2P software. the real-time monitoring platform provide managers to observe the use of P2P, including daily number of hosts, the user''s IP and weekly top P2P use, so that managers can directly monitor and investigate on individual departments or IP.