Internet流量识别基础数据采集技术的研究

J4 ›› 2011, Vol. 24 ›› Issue (5): 71-75.

Internet流量识别基础数据采集技术的研究

赵彩云, 杨波, 彭立志, 陈贞翔

济南大学信息科学与工程学院，山东省网络环境智能计算技术重点实验室，山东济南 250022

收稿日期:2011-06-30 出版日期:2011-10-20 发布日期:2011-10-20
通信作者: 杨波（1965-），男，教授，博士生导师，研究方向为计算机网络与智能信息处理。 E-mail:yangbo@ujn.edu.cn
作者简介:赵彩云（1987-），女，硕士研究生，研究方向为带准确标签的网络流量采集。Email:hongyunzhao511@163.com
基金资助:
国家 973 计划前期研究专项基金(2010CB635117 )；国家自然科学基金(60873089, 60573065, 61070130, 60903176)；山东省自然科学杰出青年基金(JQ200820)；新世纪优秀人才支持计划（NCET01000863）

Research on internet traffic collection methods with practical information

ZHAO Cai-Yun, YANG Bo, PENG Li-Zhi, CHEN Zhen-Xiang

Shandong Provincial Key Laboratory of Network Based Intelligent Computing,
School of Information Science and Engineering,University of Jinan, Jinan 250022, China

Received:2011-06-30 Online:2011-10-20 Published:2011-10-20

摘要/Abstract

摘要：

为对网络流量进行准确的分类，对比了基于主干网和基于主机的两种流量采集方案，探讨了这些采集系统的主要作用、采集流量的过程以及如何为采集的流量打上真实应用信息的标记，同时指出现有流量采集方案的优势和不足。

关键词: 流量采集, 应用程序标签, 流量分类, 采集方案

Abstract:

We compare two traffic collection schemes, backbone based and host computers based traffic collection schemes, to precisely classify network traffic. We also address their main functions, the process of their traffic collection, and how to impress practical information on the collected traffic. We eventully present their advantages and disadvantages.

Key words: traffic collection, application labels, traffic classification, traffic collection scheme

中图分类号:

TP393

赵彩云, 杨波, 彭立志, 陈贞翔. Internet流量识别基础数据采集技术的研究[J]. J4, 2011, 24(5): 71-75.

ZHAO Cai-Yun, YANG Bo, PENG Li-Zhi, CHEN Zhen-Xiang. Research on internet traffic collection methods with practical information[J]. J4, 2011, 24(5): 71-75.

参考文献

［1］ESTE A, GRINGOLI F,SALGARELLI L. On the stability of the information carried by traffic flow features at the packet level［J］.ACM SIGCOMM Computer Communication Review, 2009,39(3):3-6.
［2］MOORE A W, ZUEV D. Internet traffic classification using bayesian analysis techniques［M］//Proceedings of the 2005 ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems. NY,USA:ACM New York,2005:50-60.
［3］SZAB G, SZAB I, ORINCSAY D. Accurate traffic classification［EB/OL］.［2011-05-21］.http://nmlab.korea.ac.kr/project/papers/TrafficClassification/Accurate% 20 Traffic% 20 Classification.pdf.
［4］CROTTI M, DUSI M, GRINGOLI F,et al. Traffic classification through simple statistical fingerprinting［J］.ACM SIGCOMM Computer Communication Review, 2007,37(1):3-7.
［5］MOORE A, HALL J, KREIBICH C,et al. Architecture of a network monitor［EB/OL］.［2011-05-18］.http://citeseerx.icst.psu.edu/viewdoc/download?doi=10.1.1.12.8563&rep=repl&type=pdf.
［6］KARAGIANNIS T, PAPAGIANNAKI K, FALOUTSOS M. BLINC: multilevel traffic classification in the dark［M］//Proceedings of the 2005 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications. NY,USA:ACM New York,2005:4-11.
［7］徐鹏,刘琼,林森. 基于支持向量机的Internet 流量分类研究［J］.计算机研究与发展,2009(3):407-414.
［8］LI W, MOORE A W. A machine learning approach for efficient traffic classification［M］//Proceedings of the 2007 15th International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems.Washington,DC:IEEE Computer Society,2007：310-317.
［9］MOORE A, ZUEV D,CROGAN M. Discriminators for use in flowbased classification［R］.London,UK:Queen Mary University of London,2005.
［10］SZAB G, ORINCSAY D, MALOMSOKY S,et al. On the validation of traffic classification algorithms［M］//Proceedings of the 9th International Conference on Passive and Active Network Measurement.Berlin:SpringerVerlag,2008:6-14.
［11］CANINI M,LI W, MOORE A W,et al. GTVS: Boosting the collection of application traffic ground truth［J］.Lecture Notes in Computer Seience,2009,5537:54-63.
［12］GRINGOLI F, SALGARELLI L, CASCARANO N,et al. GT: Picking up the truth from the ground in traffic classification［J］.ACM SIGCOMM Computer Communication Review, 2009,39(5):13-18.

[1]	胡云肖，杨波，孙涛，郭延海. 面向PBOC2.0的智能卡操作系统的设计[J]. J4, 2012, 25(5): 73-77.
[2]	张庆科, 杨波, 王琳, 陈贞翔. 基于异构模式的云计算关键技术研究[J]. J4, 2011, 24(5): 56-62.
[3]	汤丽. 基于WSN的设备运行信息监测系统设计[J]. J4, 2011, 24(5): 81-84.
[4]	王可可, 杨波, 孙涛, 陈贞翔. NetFPGA应用技术研究[J]. J4, 2011, 24(5): 93-98.
[5]	于涛, 王英龙, 郭强. 一种基于RBF神经网络的无线传感器网络定位模型[J]. J4, 2010, 23(6): 82-85.
[6]	平寒. 用户连接切换的关键技术及实现[J]. J4, 2010, 23(6): 99-102.
[7]	郭鸿雁, 尉永青, 吕桃霞. 基于关联规则挖掘的网络安全审计技术研究[J]. J4, 2010, 23(5): 33-36.
[8]	孟磊磊, 高仲合. 基于主机行为模式的P2P流分类模型的设计与实现[J]. J4, 2010, 23(5): 55-58.
[9]	杨青. 基于蜜罐的网络动态取证系统研究[J]. J4, 2010, 23(5): 59-65.
[10]	柳蒙蒙, 王华, 卓翠敏, 宫恩超. 基于JavaFX和Mobile Agent的手机动漫阅读系统建模与仿真分析[J]. J4, 2010, 23(4): 61-64.