基于Bloom Filter的路由循环实时被动检测方法  

Research on a real-time passive method based on Bloom Filter

作　　者：张目[1] 

机构地区：[1]东南大学计算机科学与工程学院,南京210096

出　　处：《东南大学学报（自然科学版）》2008年第A01期135-138,共4页Journal of Southeast University：Natural Science Edition

基　　金：国家重点基础研究发展计划(973计划)资助项目(2003CB314804)

摘　　要：为了解决网络中路由循环的实时检测问题,提出了一种基于Bloom Filter的路由循环实时被动检测方法.这种方法利用Bloom Filter存储资源占用小和查找时间消耗少的优点快速地发现源、宿地址,源、宿端口号均相同的疑似循环路由报文,再通过对报文TTL值递减特征的判断确定循环路由现象的存在.对于Bloom Filter本身存在误判率的问题,该方法采用增大位向量的长度的方法予以解决.实验结果表明本方法可以准确地发现循环路由,与传统主被动探测路由循环方式相比,减少了对网络带宽资源的占用,同时极大提高了算法的实时性.A real-time passive method based on Bloom Filter is put forward for the purpose of detecting route cycling in network. This method can fast find out all the probable cycling IP packets of the same source address, destination address, source port number and destination port number; then the TTL decrease of these packets shows that the phenomenon of route cycling exists. The bit vector of Bloom Filter is enlarged to make this method more accurate. Experiment results show that this method costs much less resources of network bandwidth and is able to work in a real-time mode comparing with traditional active and passive detecting method.

关 键 词：BLOOM FILTER 路由循环 实时检测 被动测量 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]