计算机网络管理方面外文翻译.doc

authorized licensed use limited to: guilin university of electronic technology. downloaded on april 21,2010 at 07:38:02 utc from ieee xplore. restrictions apply. 80 netflow-based campus network traffic management system 1 prasad calyam, 2 dima krymskiy, 2 mukundan sridharan, 1 paul schopis 1 oarnet, 1224 kinnear road,columbus, ohio 43212. email:pcalyam, 2 department of computer science and engineering, the ohio state university, columbus, ohio 43210. email:krymskiy, abstract-in recent years, with the campus network size, complexity increases, the building in the campus network, the application of more and more, which makes a variety of network problems resulting, for such a large complex networks to solve network problems is the key issue of positioning. therefore, relevant information on network traffic and monitoring the implementation of scientific and rational and in-depth analysis, become an important element of network management, while it is for the network problems and provide effective solutions for network planning is one important means. this chapter describes the development trend of network management and network management, analysis techniques based on netflow traffic management system needs to achieve. the second chapter analyzes the current popular network data stream collection method, compared their advantages and disadvantages, and introduces the principle of netflow technology, data formats, and its various applications. chapter iii introduces the design flow management system to analyze the function of each subsystem. chapter iv introduces the important data structures and database design. chapter v details the design of data acquisition module and the implementation process. chapter vi details the data processing module design and implementation process. the final chapter on the whole traffic management system are summarized, described the system in some of the problems still exist, and netflow technology prospect. i. introduction 1. background with the rapid growth of internet applications, more and more web applications need to understand the flow of the network operation parameters, to support the services can be distinguished. by monitoring network traffic analysis and network management technology related business, you can monitor the network, including the monitoring of network operation, network resources, network performance monitoring and surveillance. monitoring quality control results will help the network and supporting network management, such as the discovery and correction of authorized licensed use limited to: guilin university of electronic technology. downloaded on april 21,2010 at 07:38:02 utc from ieee xplore. restrictions apply. 81 pathological routing, under long-term observation network routing, routing data to develop strategies. in addition, network traffic analysis can also be applied to different internet service provider isp comparison of the quality of service, the proxy server automatically select and many other areas, while simulated internet environment, protocol design and evaluation, and provide dynamic network analysis of survival basis. in this paper, design a campus network based on netflow traffic management system to be implemented in hexi college campus network traffic statistics and management of the ports can also monitor and analyze the different types of data, enabling data on the campus network to view and management. 2. the basic concept of network management and content network management refers to the supervision, organization and control of network communications services, and information processing activities necessary for the general term. from the technical point of view, the network management process typically includes data acquisition, data processing, and then submitted to the manager, for use in network operations. it may also include an analysis of the data and provide solutions, even while managers may not need to bother to handle some things. further it can generate useful management reports management network. network management goal is to ensure normal operation of a continuous network, or when the network when abnormal response and troubleshooting time, making the network with the highest efficiency and productivity l. with the development and popularization of computer networks, network management is increasingly important. not powerful management tools and effective management of technology is unable to organize coordination and efficient operation of the network. 2.1 network management needs and goals 1)the demand for network management while networks and distributed processing systems for commercial applications and even to the peoples daily life has become increasingly important role, the computer network of individuals and enterprises are increasingly becoming an indispensable tool for daily activities. many companies, state organs and institutions of higher learning need to use every day on the network data such as e-mail and fax, video conferencing and voice services, etc. to ensure their normal work. on the other hand the composition of the computer more and more complex, it is mainly manifested in the increasingly large scale networking, and networking equipment is a heterogeneous multi-device, multi-manufacturer environment, multi-protocol, there is no doubt this new situation increase the difficulty of network management. management of such networks by hand is a powerless, so the network management is an urgent task. 2)the goal of network management network management goal is to reduce the fault time, to improve and enhance the response time, improve equipment utilization; reduce network operating costs, improve network efficiency, reduce network bottlenecks, and can adapt to a variety of multimedia technology to make it easier for more secure network use. authorized licensed use limited to: guilin university of electronic technology. downloaded on april 21,2010 at 07:38:02 utc from ieee xplore. restrictions apply. 82 2.2 the field of network management technology network management technology are mainly related to the following research areas 2-3. flow measurement. interest for a particular network link, to accurately capture network activity measurements. in the network-level traffic analysis and measurement, the need to measure data, including network topology, link capacity, queuing delay, connection availability, dynamic routing and other data types. modeling. this is the network behavior and traffic analysis of the core technical problems, only to establish a reasonable description of the network model, has been able to receive traffic data is used to describe the network performance and to achieve the forecast of future network behavior. management and control. from the measurement and modeling using the knowledge gained to achieve the rational allocation of internet resources and use. network traffic flow measurement is to obtain data, conduct traffic analysis and monitoring of the key and the foundation. flow measurement of many categories, such as by measuring the way, is divided into active and passive measurement measurement; according to the number of measurement points, divided into single-point measurement and multi-point measurement; was measured according to those familiar with it or not, is divided into measurement and collaborative non-cooperative measurement; content according to measurement, measurement and performance measurement into topology 4; according to the protocol used measured, divided into the measurement-based bgp protocol, based on tcp / ip protocol and measurement standard based on snmp protocol or rmon surveying. active measurement to the network by sending data, observations, and the time required to send data to study the behavior of the network. so far, people do most of the projects involve the active measurement techniques, such as the united states, nimi project, using ping, traceroute, mtrace other active measurement tools. to june 2000, the internet run active measurement monitors the source site 116 (u.s. 114, new zealand, norway, 1 each), the purpose of the site was measured about 13 340 5. the purpose is to enhance the participation of high-performance networking sites and user operation of understanding. in the active measurement project, the scope of measurement is much greater than the passive measurements can be as large as global. such a large measurement system, the network may cause a greater load, and difficult to configure and manage unified. in passive measurement, the recorded network activity probe was access to the network, test a low in most cases, the connection between the receiving network node, the summary and record the connection piece of the information flow of business. passive measurement of the ongoing projects include: the u.s. national science foundation (nsf)-funded national laboratory for applied network research (nlanr) measurement project (pma), berkeley university and ibm jointly developed spand projects 6. passive measurement of a particular point of observation, mainly in the behavior of the network, not to increase and modify the data through the network load, it does not affect the behavior of the network. also not difficult to see, passive measurement on the premise that collaboration, or can not authorized licensed use limited to: guilin university of electronic technology. downloaded on april 21,2010 at 07:38:02 utc from ieee xplore. restrictions apply. 83 install the necessary measurement point software and hardware equipment, the measurement is limited by the scope of this 7. in terms of the number of measurement points from the network into a single point measurement and multi-point measurement. typical example of single point measurement is the bell labs internet mapping project, the project has successfully described the kosovo war in yugoslavia and kosovo during the two network topology changes, is the field of network measurement applications in the military model. single-point measurement because measurement capability is limited, collection of information is not comprehensive, but gradually being replaced by distributed multi-point measurements, particularly more active measurement, use of multiple detection points, the data obtained from a synthesis of large-scale network data and not a single point of intersection of the routing information 8. performance measurement, project carried out a lot about. one is to carry out performance measurement of a specific network maintenance and management, security and service quality; the other hand, forecasting network performance to every certain time interval, periodically monitors and dynamically forecasts (all kinds of network and computing resources), network performance. performance measurement process, data collection, after a moment, the numerical model can predict the next time the tcp / ip end to end throughput, delay, mainly used for large-scale computing wan scheduling 9-10 . 3. the development trend of network management technology 3.1the development of network management standards with the internets development, network management has gone through several stages of this 11-12: manual management of early stage of development in the internet, the network of smaller, user requirements on the reliability of the network is not too high, management is basically hand to meet, management expert from the proficient communication protocols to solve. a simplified network management tools is through the internet icmp (internet control message protocol) implementation, the effectiveness of its network management is that it provides a transmission from the router or host control information to other routers or hosts mechanism, and provide feedback on problems. icmps echo / echo-reply message pair, provided both parties to communicate in the test may, for example commonly used ping command. another time stamp and time stamp to respond to news that can be used to monitor the network delay characteristics. internet managers developed a dedicated network management tools these tools are mainly divided into two categories: real-time work tools and collect data for analysis by the non-real-time tool. these tools provide only one or some specific functions, such as the widely-used traceroute, can be used to seek to reach a destination through the path, this also can determine not reach the destination of the failures. use these tools to some extent alleviate the contradiction between the network management. based on snmp (simple network management protocol) of the overall authorized licensed use limited to: guilin university of electronic technology. downloaded on april 21,2010 at 07:38:02 utc from ieee xplore. restrictions apply. 84 management of the 13-14 the first internet architecture board intends to use the osi management program, but the regulatory framework has been discussed in the short term can not be achieved. the late 90s, internets rapid development and network management is weak, so that the commissions own internet architecture to define a common standardized network management architecture and protocols. 1988 formed a snmpvl, 1993, the published snmpv2, snmp quickly the broad support network manufacturers to become the de facto industry standard network management. 3.2 the development trend of network management technology network in the continuous development of the users demand is also growing, therefore, network management, continuous development of technology needs to move. the current trends include the following 15-16. 1)integrated network management from a single platform allows users to manage multiple network protocols, operating platform through a multiple interconnection of network management, network management system that is integrated (inms). 2)intelligent network management this is the network management is an important development, especially in the fault management functions. intelligent network management can better deal with network structure and network elements of uncertainty; to strengthen the capacity of the network management system collaboration and interoperability; rule-based intelligent network management system better able to adapt to changes in the network; intelligence of network management by the interpretation and reasoning ability with according to low-level information, according to some not very full already, not very accurate information to make judgments on the network, which enables network management automation. 3)distributed management of network management this is an important network management direction for the development plan it from the hierarchy of network management system operating mode and maintenance methods, network management, distributed management is an important trend. 3.3overview of network managementa in recent years, due to computer, network, information management database and related application technology development, internet and intranet has been widely used in chinas information construction in the education sector is under unprecedented attention. digitization of information resources to achieve a high degree of information sharing, which for teachers, students and research technicians for their importance is self-evident. campus network as cernet china education research network means the introduction of end-user, network construction is becoming the focus of education is to enhance the competitiveness of the school one of the important factors, all universities and secondary schools have gradually through cernet access internet. campus wang shi real the park is within the campus intranet, the general through the exchange of device networking and through the router or access server, enter the cernet backbone. during network planning and construction, we must fully take into account the network architecture, application services and the actual results, including a greater impact on the use of the factors is authorized licensed use limited to: guilin university of electronic technology. downloaded on april 21,2010 at 07:38:02 utc from ieee xplore. restrictions apply. 85 the effect of network exports. as the access to large amounts of data and inter-school exchanges require a high-speed exit, and the special requirements of the campus network must use network address translation must be nat (network address translator) 17, so this need to export the core equipment should be has strong capacity to address translation. now there are a variety of network devices on the network, which means that achieve a variety of hardware platforms, operating systems running various software programs unified management unlikely. in fact, the management of these programs is nothing more than they need to send commands and data, and from them to obtain data and status information. this system needs a managers role and managed object mo (managed object). as a general procedure has many objects need to be managed (corresponding to a different set of network resources), so we can use a program as an agent (agent), all of these managed objects packaged together to achieve the unity of the interaction manager . to achieve a managed program (agent) management, managers need to know to be manager of the information model (in fact proxy managed object contains the information model). in order to transmit such information, people must be provided between the manager and was manager of a network protocol. we know that different platforms for integers, characters have different coding, to make an application under different platforms to read each others data, must also provide for a no ambiguity, unified data description syntax and encoding formats. therefore, itu provides the def