웹 기반의 실시간 인터넷 트래픽 흐름 측정 및 분석 - KNOM
웹 기반의 실시간 인터넷 트래픽 흐름 측정 및 분석 - KNOM
웹 기반의 실시간 인터넷 트래픽 흐름 측정 및 분석 - KNOM
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
WWW (World-Wide<br />
Web) <br />
. <br />
<br />
<br />
<br />
. <br />
<br />
<br />
<br />
<br />
. <br />
<br />
. <br />
<br />
<br />
. <br />
<br />
, <br />
<br />
. <br />
<br />
<br />
<br />
<br />
.<br />
1. <br />
. <br />
<br />
<br />
<br />
<br />
<br />
. <br />
<br />
<br />
, 1969 <br />
<br />
<br />
ARPANET[1]<br />
<br />
, <br />
<br />
<br />
<br />
<br />
. <br />
. <br />
<br />
<br />
<br />
<br />
MRTG[2], Etherfind[3],<br />
<br />
, WWW<br />
TCPdump[4], WebTrafMon[5] <br />
(World-Wide Web) WWW <br />
<br />
. <br />
<br />
. <br />
MIB SNMP<br />
<br />
agent <br />
<br />
SNMP manager <br />
<br />
.<br />
<br />
<br />
<br />
<br />
<br />
<br />
.<br />
<br />
, <br />
<br />
, SNMP agent SNMP manager
, NT <br />
.<br />
<br />
<br />
<br />
<br />
<br />
<br />
. <br />
<br />
<br />
<br />
<br />
. <br />
manager <br />
<br />
<br />
. ,<br />
<br />
<br />
<br />
<br />
[8]<br />
, <br />
<br />
<br />
<br />
<br />
.<br />
<br />
.<br />
. <br />
<br />
WebTrafMon[5]<br />
<br />
MRTG[2]WebTrafMon[5] , <br />
<br />
<br />
. <br />
. <br />
. <br />
<br />
<br />
<br />
.<br />
2. <br />
<br />
<br />
<br />
MRTG[2]<br />
WebTrafMon[5] .<br />
2.1 MRTG<br />
II In/Out octet PNG<br />
<br />
, <br />
.<br />
MRTG <br />
, , , 1<br />
<br />
. <br />
<br />
2.2 WebTrafMon<br />
<br />
<br />
<br />
, <br />
<br />
<br />
, <br />
<br />
.<br />
WebTrafMon<br />
<br />
<br />
. <br />
<br />
<br />
.<br />
<br />
<br />
<br />
<br />
<br />
. <br />
<br />
MRTG(Multi-Router Traffic Grapher)[2]<br />
<br />
<br />
<br />
,<br />
<br />
<br />
SNMP MIB<br />
<br />
<br />
.<br />
<br />
. <br />
WebTrafMon <br />
(probe)<br />
HTML <br />
(viewer) . <br />
<br />
<br />
<br />
<br />
, <br />
. MRTG SNMP <br />
<br />
<br />
<br />
Perl SNMP <br />
<br />
. <br />
<br />
C <br />
.
(attribute)<br />
<br />
.<br />
3. <br />
<br />
(Real-time<br />
Traffic Flow Measurement)[6,13] <br />
. <br />
meter manager , meter<br />
<br />
(rule set) <br />
SRL(Simple Ruleset Language)[8]<br />
<br />
.<br />
3.1 <br />
[6,13]IETF <br />
, <br />
(traffic flow)<br />
<br />
. <br />
, <br />
<br />
<br />
. 1991 RFC 1272[14]<br />
, 1997 meter <br />
<br />
. [9] , <br />
.<br />
( 1) <br />
<br />
<br />
[7] 1 <br />
meter, meter reader, manager, analysis application <br />
<br />
. meter PME(Packet Matching Engine) . PME<br />
(metering point) <br />
<br />
, meter<br />
reader meter . <br />
manager <br />
meter meter reader<br />
<br />
,<br />
meter meter reader <br />
, analysis application <br />
<br />
<br />
. meter<br />
, <br />
<br />
(entity)<br />
. <br />
, <br />
, <br />
<br />
<br />
<br />
. manager <br />
meter . <br />
meter manager <br />
. meter <br />
meter MIB<br />
SNMP agent<br />
,<br />
manager <br />
meter MIB SNMP manager .<br />
3.2 meter<br />
meter[7] <br />
. <br />
meter <br />
. <br />
meter <br />
<br />
, <br />
(flow table) . <br />
meter<br />
<br />
. <br />
meter <br />
, <br />
, , .<br />
2meter . <br />
<br />
<br />
, <br />
(virtual machine)
Specified Rule Set, Set High Water Mark, Set Flow<br />
Termination Parameters, Set Inactivity Timeout <br />
[7] meter <br />
.<br />
3.4 meter MIB<br />
( 2) meter <br />
, <br />
. flowData <br />
(flow key) <br />
.<br />
meter reader[7] <br />
, <br />
, , <br />
<br />
. meter<br />
. <br />
. flowRules <br />
<br />
, <br />
<br />
<br />
.<br />
<br />
<br />
flowData<br />
, <br />
<br />
<br />
. PeerType <br />
<br />
. <br />
(rule) , IPv4Ipv6, 3CLNS, 11 IPX, 11 appletalk,<br />
meter<br />
. 13 DECnet . TransType Tranport<br />
SRL(Simple Ruleset Language) , Address , 6 tcp,<br />
SRL 3.5 17 udp, 1 icmp .<br />
. <br />
<br />
meter <br />
SourceTransAddress DestTransAddress <br />
. <br />
<br />
.<br />
3.3 manager<br />
manager[7]meter meter reader <br />
<br />
. meter <br />
<br />
<br />
<br />
. <br />
. <br />
<br />
, <br />
<br />
manager <br />
. SRL(Simple Ruleset Lanauage)[8]<br />
manager meter <br />
<br />
<br />
. Download Rule Set, Switch to<br />
meter MIB[10]1995 12 IETF <br />
David Perkins SNMPv2 MIB <br />
, 1996 <br />
. <br />
flowMIB[10] flowControl,<br />
flowData, flowRules, flowMIBConformance <br />
. flowControl , , <br />
manager ,<br />
<br />
, , <br />
<br />
<br />
. <br />
<br />
<br />
,<br />
PeerAddress . 1 2 <br />
.<br />
3.5 SRL<br />
meter <br />
<br />
. meter <br />
<br />
manager <br />
meter PME <br />
.
. SRL meter <br />
<br />
. <br />
<br />
<br />
, <br />
. <br />
<br />
<br />
. SRL IF <br />
<br />
SRL <br />
<br />
, SAVE <br />
. , COUNT SNMP Agent meter <br />
<br />
.<br />
SRL <br />
meter MIB[10]<br />
.<br />
- ‘#’ .<br />
- .<br />
- (;) .<br />
- (identifier) , manager nm_rc[11] , <br />
, ‘_’ .<br />
- <br />
.<br />
3 SRL <br />
<br />
. <br />
<br />
IP,<br />
EtherTalk, IPX, DECnet <br />
<br />
tcp, udp, icmp .<br />
<br />
<br />
, <br />
.<br />
4.1 <br />
4 .<br />
NeTraMet[9]<br />
<br />
. NeTraMet meterSNMPv2<br />
SNMP agent . meter MIB <br />
RFC 2064[10] .<br />
SNMP manager NeTraMet <br />
CGI <br />
.<br />
( 4) <br />
<br />
( 3) SRL <br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
nm_rc<br />
manager <br />
meter reader NeMac[11]<br />
<br />
<br />
<br />
fd_filter[11]<br />
. NeMac <br />
<br />
meter<br />
, meter <br />
SNMP <br />
. <br />
<br />
.
4.2 <br />
SNMP agent SNMP manager <br />
<br />
. <br />
<br />
manager <br />
<br />
<br />
. <br />
agent manager <br />
<br />
. <br />
<br />
manager <br />
agent <br />
.<br />
<br />
, , , <br />
<br />
, <br />
, , <br />
, <br />
. , <br />
. <br />
<br />
<br />
.<br />
meter IP <br />
<br />
<br />
manager <br />
<br />
<br />
. Linux Kernel 2.0.32<br />
<br />
.<br />
, meter <br />
Intel Pentium 133MHz, 64MB <br />
. <br />
meter manager <br />
. <br />
<br />
<br />
Libpcap 0.4a6[4] ,<br />
<br />
. <br />
<br />
<br />
<br />
, <br />
SRL <br />
. Apache<br />
<br />
. <br />
Web Server 1.2.5 CGI <br />
Perl<br />
<br />
<br />
.<br />
. <br />
, <br />
, <br />
<br />
, <br />
, <br />
<br />
<br />
. , <br />
<br />
<br />
<br />
.<br />
<br />
<br />
, agent manager <br />
<br />
<br />
<br />
.<br />
5. <br />
<br />
<br />
<br />
<br />
<br />
.<br />
5.1 <br />
<br />
Intel Pentium 100MHz, 64MB <br />
meter New Zealand University of Auckland <br />
Nevil Brownlee NeTraMet[11]<br />
<br />
<br />
, . manager <br />
5.004_01, HTML <br />
.<br />
4.3 <br />
5.2 <br />
manager <br />
<br />
<br />
meter <br />
<br />
. <br />
(%), , <br />
Linux Unix <br />
.<br />
meter manager
. <br />
meter<br />
NeTraMet<br />
<br />
NetFlowMet[9] NeTraMet <br />
<br />
Libpcap[4]<br />
.<br />
5.3 <br />
<br />
<br />
<br />
.<br />
5.3.1 <br />
<br />
<br />
<br />
<br />
<br />
<br />
5 <br />
. <br />
<br />
, <br />
, , , Monitoring”<br />
<br />
<br />
, , “Traffic History”1 <br />
.<br />
( 6) <br />
<br />
<br />
“Real-time Monitoring”“Traffic<br />
History”<br />
<br />
. “Real-time<br />
.<br />
5.3.2 <br />
<br />
<br />
<br />
, “Real-time Monitoring”<br />
. 7<br />
<br />
, IP ,<br />
<br />
<br />
, <br />
.<br />
10 , 10 <br />
( 5) <br />
<br />
<br />
<br />
. IP <br />
meter <br />
.<br />
6 <br />
<br />
<br />
. <br />
<br />
, <br />
“Introduction” <br />
<br />
.
( 7) <br />
<br />
( 9) <br />
<br />
<br />
<br />
8 <br />
<br />
<br />
. <br />
<br />
IP , <br />
, <br />
<br />
. 8 <br />
<br />
. <br />
11 8 <br />
<br />
, , <br />
<br />
<br />
, , <br />
<br />
<br />
.<br />
10 8 <br />
<br />
<br />
. <br />
.<br />
. IANA[12] <br />
<br />
<br />
.<br />
<br />
<br />
( 8) <br />
9 8 <br />
<br />
<br />
<br />
. IP 71%<br />
<br />
. <br />
<br />
<br />
.<br />
( 10)
13 12 <br />
<br />
. <br />
<br />
, <br />
IP<br />
, , <br />
. <br />
<br />
<br />
. <br />
<br />
<br />
<br />
<br />
, <br />
.<br />
( 11) <br />
<br />
<br />
5.3.3 <br />
<br />
<br />
<br />
<br />
<br />
.<br />
12 <br />
. , , <br />
<br />
<br />
, <br />
<br />
<br />
.<br />
( 13) <br />
<br />
<br />
<br />
14 12 <br />
.<br />
( 12) <br />
<br />
14. <br />
<br />
<br />
13
IP , , <br />
<br />
<br />
<br />
. <br />
<br />
. meter manager <br />
<br />
<br />
. <br />
udp manager meter <br />
.<br />
15 12 <br />
<br />
. IP , <br />
, <br />
<br />
. <br />
<br />
<br />
<br />
<br />
, <br />
<br />
<br />
. <br />
.<br />
IANA[12] <br />
meter <br />
.<br />
<br />
. meter manager<br />
<br />
, <br />
manager meter <br />
. manager <br />
<br />
. , <br />
<br />
<br />
<br />
<br />
. <br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
.<br />
[]<br />
15. <br />
<br />
<br />
<br />
6. <br />
<br />
<br />
, <br />
<br />
. <br />
[5] J. Won-Ki Hong, Soon-Sun Kwon and Jae-Young<br />
AOD(Audio On Demand), VOD(Video On Demand) <br />
<br />
<br />
<br />
<br />
.<br />
<br />
[1] Michael Hauben, “History of ARPANET,”<br />
http://www.dei.isep.ipp.pt/docs/arpa-Contents.html.<br />
[2] Tobias Oetiker and Dave Rand, “MRTG: Multi<br />
Router Traffic Grapher,” httpd://ee-<br />
staff.ethz.ch/~oetiker/webtools/mrtg/mrtg.html.<br />
[3] Craig Hunt, TCP/IP Network Administration,<br />
O’Reilly and Associates, Inc., 1992.<br />
[4] Lawrence Berkley National Laboratory,<br />
"tcpdump 3.4a6", ftp://ftp.ee.lbl.gov.<br />
Kim, "WebTrafMon: Web-based Internet/Intranet<br />
Network Traffic Monitoring and Analysis System",<br />
Computer Communications, Elsevier Science, Vol.<br />
22, No. 14, September 1999, pp. 1333-1342.
[6] S. Handelman, S. Stibler, N. Brownlee and G. Ruth,<br />
“RTFM : New Attributes for Traffic Flow<br />
Measurement,” RFC 2724, October, 1999.<br />
[7] N. Brownlee, C. Mills, and G. Ruth, “Traffic Flow<br />
Measurement : Architecture,” RFC2722, October<br />
1999.<br />
[8] N. Brownlee, “SRL : A Language for Describing<br />
Traffic Flows and Specifying Actions for Flow<br />
Groups,” August 1999.<br />
[9] N. Brownlee, “Traffic Flow Measurement :<br />
Experiences with NeTraMet,” RFC 2123, March<br />
1997.<br />
[10] N. Brownlee, “Traffic Flow Measurement : Meter<br />
MIB,” RFC 2720, October 1999.<br />
[11] N. Brownlee, NeTraMet home page,”<br />
http://www.auckland.ac.nz/net/ NeTraMet.<br />
[12] IANA, “Protocol Numbers,”<br />
ftp://ftp.isi.edu/iana/assignments/protocol-numbers .<br />
[13] N. Brownlee, “RTFM : Applicability Statement,”<br />
RFC 2721, October 1999.<br />
[14] C. Mills , D. Hirsh, G. Ruth, “Internet Accounting :<br />
Background”, RFC 1272, November 1991.<br />
<br />
1996 <br />
, <br />
1998 <br />
, <br />
1999- <br />
<br />
: <br />
<br />
1994 <br />
, <br />
1996 <br />
, <br />
1996-1998 <br />
<br />
1998- <br />
<br />
: <br />
<br />
, <br />
, CORBA, <br />
<br />
1983 Univ. of Western Ontario, <br />
1985 Univ. of Western Ontario, <br />
1985-1986 Univ. of Western Ontario, <br />
1986-1991 Univ. of Waterloo, <br />
1991-1992 Univ. of Waterloo, Post-Doc fellow<br />
1992-1995 Univ. of Western Ontario, <br />
1995-<br />
<br />
: , <br />
<br />
, CORBA, Internet .
Change language