Anomaly traffic extraction and classification based on Netflow
Shirui Zhu · Jisuanji gongcheng yu sheji · 2009
The previous network traffic anomaly analysis can detect the abnormal traffic in Macro.But they can not extract the abnormal and treat it.A method is presented to detect the host who cause the abnormal traffic by statistic the single IP history data and prodict under netflow environment to judge the main reason and supply ACL strategy,and control the network traffic Stability in space and time.The experiment shows that this method is possible and efficiency.