摘要
随着互联网的迅速发展,IPv4(internet protocol version4)协议在很多方面已经出现明显的局限,IPv6(internet protocol version6)应运而生,成为了下一代互联网建设的基础之一。深度流检测技术在IPv4网络的管理中应用越来越广泛,但由于IPv6协议与IPv4协议的差异性,该技术并不能简单地移植到IPv6网络中,必须设计一套全新的结合深度流检测的技术优势,并能对网络中的IPv6数据包进行有效识别和高效控制的管理系统。针对IPv6的协议特性,研究了深度流检测技术的应用方法,在MPC8572硬件平台上结合查找表单元的硬件查找功能,提出了一套针对IPv6协议的网络行为分析系统方案。本文的研究成果不仅填补了IPv6网络行为监管方面的系统方案空白,更为构建安全、高效的下一代网络提供了参考。
As the development of the internet, IPv4（Internet Protocol version 4） has shown obvious limitation in many respects. Thus IPv6 （Internet Protocol version 6） came into existence as the situation requires and became one of the foundations of the next generation intemet. DFI （Deep Flow Inspect） technique is used more and more widespread in the IPv4 internet. However, it could not be transplanted to IPv6 internet directly and it is necessary to design a brandnew set of managing system, which could combine the technical superiority of DFI, and make effective identification and efficient control of IPv6 data packet. Aiming at the feature of IPv6, this article analyzed the applications of DFI technique and raised a proposal of network-behavior-analysis system, which combined with the function of TLU （table lookup unit）＇s hardware lookup on the hardware platform of network processor MPC8572. In this article, the results of research not only fill the blank of proposals of IPv6 network-behavior-supervision system, hut also provid a reference for building the safe and effective next generation network.
出处
《电子测量技术》
2009年第8期63-66,84,共5页
Electronic Measurement Technology
关键词
IPV6
深度流检测
查找表单元
网络行为分析
IPv6
DFI（deep flow inspection）
TLU（table lookup unit）
Network behavior analysis
