基于多位域的等概率随机IP流抽样算法  

An Equal Probability Random Sampling Algorithm of IP Flow Based on Multiple Bit Fields

作　　者：张毅卜 李鑫[2] 戢勇[2] 夏靖波[1] 刘一博[1] 

机构地区：[1]空军工程大学信息与导航学院,西安710077 [2]空军通信网络技术管理中心,北京100843

出　　处：《电光与控制》2015年第4期46-49,61,共5页Electronics Optics & Control

基　　金：陕西省自然科学基金(2012JZ8005)

摘　　要：对IP流信息的全方位提取有助于实现网络实时监控,精细管理,有利于网络安全性能的提升。已有的等概率随机IP流抽样算法将大量的IP流重复抽样,浪费了宝贵的计算和存储资源。针对这个问题,在原有算法的基础上设计了一种新的等概率随机IP流抽样算法,该算法在Bloom Filter的基础上采用三层位域,两层同时测量,结果取交集的方法,便于实际使用并且有效减少了已被抽样的IP流被重复抽样。实验结果表明:新方法能够大幅度提高测量精度,节约了系统资源,可以适用于10 Gb/s左右的高速网络之中。The omnidirectional collection of IP flow information is helpful for the real-time monitoring and precise management of the network,and also beneficial for improving the network security. The original IP flow sampling algorithm makes repeated sampling to the IP flow,resulting in a waste of storage and computing resource. Based on the original algorithm,a new method of IP flow sampling in high speed network with equal probability random is presented. This algorithm adopts three-level bit fields based on Bloom Filter,with two of them measured simultaneously for obtaining the intersection of their results. It is convenient and can prevent repeat sampling to IP flow effectively. The experimental results indicate that： The new algorithm can improve the measure precision drastically and make full use of the system resources,which is applicable to 10 Gb / s high speed network.

关 键 词：高速网络 IP流 BLOOM FILTER 等概率随机抽样 装载因子 

分 类 号：V271.4[航空宇航科学与技术—飞行器设计] TP393[自动化与计算机技术—计算机应用技术]