空军工程大学学报（自然科学版）2013，Vol.14Issue(4)：52-56,5.DOI:10.3969/j.issn.1009-3516.2013.04.013
基于掩码匹配的报文双抽样方法
A Packet Double Sampling Method Based on Mask Matching
摘要
Abstract
The packet sampling algorithm based on mask matching is a practical distributed traffic sampling algorithm.But the algorithm is ineffective in measuring an important network traffic characteristic,which is the distribution of packet arrival time interval.First of all,the reason leading to the problem is analyzed according to the error theory.Then,an improved program of double sampling is introduced in the initial algorithm in order to reduce the system error of measurement.As the improved algorithm will bring extra burden to the measurement system,a solution which is to increase the sampling mask bits is put forward and its feasibility is demonstrated.Finally,the improved algorithm is tested with the actual network traffic data.The experiment results show that the measurement of the distribution of packet arrival time interval is in line with the real situation.And it has little effect on the measurement accuracy of other network performances.关键词
流量测量/掩码匹配/报文到达时间间隔/双抽样/测量精度Key words
traffic measurement/mask matching/packet arrival time interval/double sampling/measurement accuracy分类
信息技术与安全科学引用本文复制引用
夏靖波,孙昱,申健,王少龙,王芳..基于掩码匹配的报文双抽样方法[J].空军工程大学学报（自然科学版）,2013,14(4):52-56,5.基金项目
陕西省自然科学基金资助项目(2012JZ8005) （2012JZ8005）
