基于IPFIX的IPv6流信息导出系统的研究  

Research on IPFIX based flow information export system for IPv6 traffic

作　　者：郑嵘[1] 

机构地区：[1]上海大学通信与信息工程学院,上海200072

出　　处：《电子测量技术》2011年第10期120-124,共5页Electronic Measurement Technology

摘　　要：流信息导出是网络异常流量分析的基础。IPv6对IPv4做了较大的改进,因此流信息也发生了变化,但是目前针对IPv6特有流信息导出的研究并不多。本文首先对IPv6流信息的特点以及获取这部分流信息的必要性进行了说明,然后对该领域内的研究现状进行了分析。在此基础上,实现了1种基于IPFIX的IPv6流信息导出系统,该系统的特点是增加了对IPv6扩展报头、ICMPv6和常见隧道机制的支持。最后,使用真实网络中捕获的数据对系统进行了验证。Flow information export is the prerequisite of network anomaly traffic inspection.The flow information has been changed since IPv6 have introduced many new features into the protocol,but there are still few researches against the IPv6 specific flow information export at this time.In this paper,we discuss the distinguishing features of IPv6 flow information compared with IPv4 and prove the need of exporting this information.Moreover,current status of the study in this area is reviewed.We than describe the implementation details of an IPFIX based flow information export system for IPv6 traffic,which includes the support for IPv6 extension headers,ICMPv6,and tunneling flows.From the experiments with the data sets captured from real-world network traffic,we have demonstrated this system is capable of performing IPv6 specific flow information export.

关 键 词：IPV6 流信息导出 IPFIX 异常流检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]