构建"切片式"监控系统保障电信运营网络安全

如何通过网络监控系统来保障运营商网络安全,特别是在大规模的电信运营商网络中进行集中式的网络监控一直是困扰运营商维护人员的难题.目前的监控手段都存在着一定的局限性,无法从根本上解决问题.本文通过综合运用SNMP采样、NetFlow分析和探针分析,并且利用Juniper路由器特有的端口镜像功能将这三种手段有效地结合起来,构造出一种"切片式"监控系统,可以较好地完成粗、细粒度结合的电信网络集中监控任务,从而为保障电信运营商网络安全打下一个坚实的基础.

Provide ISP Security by Sliced Network Monitoring System

How to ensure service provider's network security through network monitoring system,especially how to use centralized monitoring in an extensive Internet service provider's system has been a tough problem that always puzzle the administrators.Current monitoring measures all limited in a certain aspect that prevent them from solving the problem ultimately.Through integrating the SNMP sampling,NetFlow analy-sis,probe analysis,and the unique port mirroring function of Juniper router,this paper is going to present a'sliced'monitoring system,which is more effective in both detailed and summarized analysis,so that to laid a stable foundation for further research and operation to Internet service provider.