Journal of Information Processing Systems

Korea Information Processing Society (한국정보처리학회)
권호 표지
DOI QR코드

DOI QR Code

A Light-weight and Dynamically Reconfigurable RMON Agent System

  • Lee, Jun-Hyung (School of Computer Engineering and Information Technology, University of Ulsan) ;
  • Park, Zin-Won (School of Computer Engineering and Information Technology, University of Ulsan) ;
  • Kim, Myung-Kyun (School of Computer Engineering and Information Technology, University of Ulsan)
  • Published : 2006.12.31
Download PDF
⟨ Previous Next ⟩

Abstract

A RMON agent system, which locates on a subnet, collects the network traffic information for management by retrieving and analyzing all of the packets on the subnet. The RMON agent system can miss some packets due to the high packet analyzing overhead when the number of packets on the subnet is huge. In this paper, we have developed a light-weight RMON agent system that can handle a large amount of packets without packet loss. Our RMON agent system has also been designed such that its functionality can be added dynamically when needed. To demonstrate the dynamic reconfiguration capability of our RMON agent system, a simple port scanning attack detection module is added to the RMON agent system. We have also evaluated the performance of our RMON agent system on a large network that has a huge traffic. The test result has shown our RMON agent system can analyze the network packets without packet loss.

Keywords

References

  1. W. Stallings, 'SNMP, SNMPv2, SNMP v3, and RMON 1 and 2,' Addison-Wesley, 1998
  2. S. Waldbusser, Remote Monitoring Management Information Base (RFC 1757), Feb. 1995
  3. S. Waldbusser, Remote Monitoring Management Information Base Version 2 (RFC 2021), Jan. 1997
  4. The Simple Times, Agent Extensibility, Vol. 4, No 2, Apr. 1996
  5. Microsoft, http://msdn.microsoft.com/library/xml
  6. Microsoft, http://msdn.microsoft.com/library/default. asp?url=/library/en-us/iissdk/iis/isapiextensions.asp
  7. NetGroup, Politecnico di Torino, http://winpcap. polito.it/default.htm
  8. Sys-Security Group, http://www.sys-security.com /archive/papers/Network_Scanning_Techniques.pdf