網路流量監測工具"sflow"研究與分析

The Research and Analysis of the Network Flow Monitor Tool "sflow"

李至欽(Jew-Chin Lee) ； 黃毓亞(Yuh-Yea Hwang) ； 吳乾民(Chien-Min Wu)

《電腦與通訊》 117期 (2006/09) Pp. 38-47

https://doi.org/10.29917/CCLTJ.200609.0006

摘要

由於現今網路規模逐漸擴大且日益複雜，網路管理一直是各企業長期追求的目標。為了有效地管理網路，網路管理程式已成了管理者不可或缺的工具。在本文中將介紹監測網路流量工具sflow，並以工研院對外連結廣域網路(Wide Area Network; WAN)路由器(Router)的流量為量測對象，透過遠端伺服器收集並開發統計流量軟體。首先我們會藉著一套流量統計的工具sflow，負責將網路總出口端每次連線建立目的網際網路協定(Internet Protocol; IP)、來源IP、時間、使用量等資訊予以記錄。然後將使用量在特定期間內依來源IP予以統計，再配合動態主機組態通訊協定(Dynamic Host Configuration Protocol; DHCP)系統所紀錄人員工號與IP對應關係，整合人力資料庫之方法，來修正以網段為單位計量的缺失，分析1.各單位網路計價分攤2.預測使用者滿意度與網路頻寬的關係圖，來做頻寬在昇級的正確判斷。3.何種網路協定(Protocol)的流量是瓶頸所在，並針對該網路協定來思考如何提升速度？4.網路應用服務(如WWW、FTP、Mail等等)的使用者前30名(TOP30)來查看是否有無不當使用。這些資訊足以讓你瞭解網路目前需求以及未來擴充方向。因文章篇幅有限，筆者基於以上所述的情況，僅對於(1)、(2)二項來探討分析。

關鍵字

簡易網路管理通信協定 ； 動態主機組態通訊協定 ； 常態分佈 ； AWK為一程式語言，分別取其設計者為Aho, Weinberger以及Kernighan三人的字首

並列摘要

Nowadays, the network scale is more and more expanded and complicated, and good network management has been a goal that every enterprise pursues all the time. In order to manage the network effectively, the network management program has already become the administrator's indispensable tool. This text will recommend ”sflow”, a monitoring tool of the network traffic, that linked the ITRI wide area network router to measure the flow, and collected and developed the flow statistics software through a remote server. We will use the flow statistics tool ”sflow” at first, and recorded each network connection for the destination IP (Internet Protocol; IP), source IP, time, size information, etc. According to the source IP we counted the size during the specific period, and combined with the DHCP (Dynamic Host Configuration Protocol) system which records the employee ID number and IP associated, and employs the personnel database to correct the defect measured by subnet. We analyze the following four questions: 1. Each unit shares how much the wide area network bandwidth cost? 2. Predict the relation pictures for the user's satisfaction and network bandwidth to suggestion for upgrading bandwidth. 3. Which kind of network protocol traffic is the bottleneck, and how to improve the speed? 4. Check Top 30 most frequent users of network application service (such as WWW, FTP, Mail, etc.) whether they used improperly or not. Those informations are enough to let you understand the demand at present and expand the direction in the future. Because the space of this article is limited, we will only discuss and analyze questions 1. and 2.

並列關鍵字

Simple Network Management Protocol ； SNMP ； Dynamic Host Configuration Protocol ； DHCP ； Normal Distribution ； AWK