基于Netfilter的流量检测与控制系统

P2P流量已成为互联网流量的重要组成部分，由于其占用大量带宽，严重影响了其他网络业务的运行，因此如何有效地检测和控制网络流量已成为目前面临的一个重要难题。基于Linux的Netfilter防火墙和连接跟踪机制，结合应用层协议识别工具L7-filter和流量控制器TC设计并实现了一个简单而高效的流量控制系统。该系统首先对数据包进行应用层协议识别并分类，然后对有限的网络带宽进行合理分配，实现流量控制。实验证明此系统能有效地检测和控制网络流量。

Traffic Identification and Control System Based on Netfilter

P2P traffic has taken great portions in the network traffic. It is a serious influence to the rest of network service that peer-to- peer flows occupy the network bandwidth seriously, therefore how to effectively identify and control network traffic has been a very important problem. A simple and efficient traffic control system was designed and realized based, on Linux Netfilter ftrewall and connecting tracking strategy. It combined the L7-filter which identifies packets based on application layer data and TC which is a traffic control tool. The system can identify and classify packets based on application layer data and allocate limited network bandwidth properly to realize traffic control. The experiment proves that the system can identify and control network traffic effectively.