基于Bloom Filter的路由循环实时被动检测方法

为了解决网络中路由循环的实时检测问题,提出了一种基于Bloom Filter的路由循环实时被动检测方法.这种方法利用Bloom Filter存储资源占用小和查找时间消耗少的优点快速地发现源、宿地址,源、宿端口号均相同的疑似循环路由报文,再通过对报文TTL值递减特征的判断确定循环路由现象的存在.对于Bloom Filter本身存在误判率的问题,该方法采用增大位向量的长度的方法予以解决.实验结果表明本方法可以准确地发现循环路由,与传统主被动探测路由循环方式相比,减少了对网络带宽资源的占用,同时极大提高了算法的实时性.

Research on a real-time passive method based on Bloom Filter

A real-time passive method based on Bloom Filter is put forward for the purpose of detecting route cycling in network.This method can fast find out all the probable cycling IP packets of the same source address,destination address,source port number and destination port number;then the TTL decrease of these packets shows that the phenomenon of route cycling exists.The bit vector of Bloom Filter is enlarged to make this method more accurate.Experiment results show that this method costs much less resources of network bandwidth and is able to work in a real-time mode comparing with traditional active and passive detecting method.