A Graphical User Interface in WLAN Monitoring and Management System



Similar documents
Research on the Monitoring System based on Next Generation Network

Return Calculation of U.S. Treasury Constant Maturity Indices

Trends in TCP/IP Retransmissions and Resets

TSG-RAN Working Group 1 (Radio Layer 1) meeting #3 Nynashamn, Sweden 22 nd 26 th March 1999

t Thick,intelligent,or thin access points? t WLAN switch or no WLAN switch? t WLAN appliance with 3rd party APs?

CHARGE AND DISCHARGE OF A CAPACITOR

cooking trajectory boiling water B (t) microwave time t (mins)

AP Calculus AB 2013 Scoring Guidelines

Morningstar Investor Return

Automatic measurement and detection of GSM interferences

Market Liquidity and the Impacts of the Computerized Trading System: Evidence from the Stock Exchange of Thailand

Task is a schedulable entity, i.e., a thread

Performance Center Overview. Performance Center Overview 1

WATER MIST FIRE PROTECTION RELIABILITY ANALYSIS

PROFIT TEST MODELLING IN LIFE ASSURANCE USING SPREADSHEETS PART ONE

USE OF EDUCATION TECHNOLOGY IN ENGLISH CLASSES

Relationship between stock index and increments of stock market trading accounts

AP Calculus BC 2010 Scoring Guidelines

RC (Resistor-Capacitor) Circuits. AP Physics C

Differential Equations. Solving for Impulse Response. Linear systems are often described using differential equations.

Multiprocessor Systems-on-Chips

Chapter 7. Response of First-Order RL and RC Circuits

Chapter 1.6 Financial Management

Research and application of estimation method for software cost estimation based on Putnam model

Statistical Analysis with Little s Law. Supplementary Material: More on the Call Center Data. by Song-Hee Kim and Ward Whitt

INTEREST RATE FUTURES AND THEIR OPTIONS: SOME PRICING APPROACHES

DYNAMIC MODELS FOR VALUATION OF WRONGFUL DEATH PAYMENTS

Model-Based Monitoring in Large-Scale Distributed Systems

This is the author s version of a work that was submitted/accepted for publication in the following source:

Principal components of stock market dynamics. Methodology and applications in brief (to be updated ) Andrei Bouzaev, bouzaev@ya.

Module 4. Single-phase AC circuits. Version 2 EE IIT, Kharagpur

Molding. Injection. Design. GE Plastics. GE Engineering Thermoplastics DESIGN GUIDE

µ r of the ferrite amounts to It should be noted that the magnetic length of the + δ

Optimal Mortgage Refinancing Based on Monte Carlo Simulation

AP Calculus AB 2010 Scoring Guidelines

How To Calculate Price Elasiciy Per Capia Per Capi

Product Operation and Setup Instructions

SELF-EVALUATION FOR VIDEO TRACKING SYSTEMS

Journal Of Business & Economics Research September 2005 Volume 3, Number 9

9. Capacitor and Resistor Circuits

11/6/2013. Chapter 14: Dynamic AD-AS. Introduction. Introduction. Keeping track of time. The model s elements

Predicting Stock Market Index Trading Signals Using Neural Networks

A Scalable and Lightweight QoS Monitoring Technique Combining Passive and Active Approaches

Full-wave rectification, bulk capacitor calculations Chris Basso January 2009

QUALITY OF EXPERIENCE (QoE) is a relatively new

Duration and Convexity ( ) 20 = Bond B has a maturity of 5 years and also has a required rate of return of 10%. Its price is $613.

Vector Autoregressions (VARs): Operational Perspectives

DDoS Attacks Detection Model and its Application

Making a Faster Cryptanalytic Time-Memory Trade-Off

Chapter Four: Methodology

The Transport Equation

The Greek financial crisis: growing imbalances and sovereign spreads. Heather D. Gibson, Stephan G. Hall and George S. Tavlas

A Probability Density Function for Google s stocks

TEMPORAL PATTERN IDENTIFICATION OF TIME SERIES DATA USING PATTERN WAVELETS AND GENETIC ALGORITHMS

Switching Regulator IC series Capacitor Calculation for Buck converter IC

Towards Intrusion Detection in Wireless Sensor Networks

Capacity Planning and Performance Benchmark Reference Guide v. 1.8

Appendix A: Area. 1 Find the radius of a circle that has circumference 12 inches.

Chapter 8: Regression with Lagged Explanatory Variables

Internet Appendix to Product Market Competition, Insider Trading and Stock Market Efficiency *

OPERATION MANUAL. Indoor unit for air to water heat pump system and options EKHBRD011ABV1 EKHBRD014ABV1 EKHBRD016ABV1

AP Calculus AB 2007 Scoring Guidelines

MACROECONOMIC FORECASTS AT THE MOF A LOOK INTO THE REAR VIEW MIRROR

Cointegration: The Engle and Granger approach

Description of the CBOE S&P 500 BuyWrite Index (BXM SM )

Appendix D Flexibility Factor/Margin of Choice Desktop Research

Chapter 4: Exponential and Logarithmic Functions

A Note on Using the Svensson procedure to estimate the risk free rate in corporate valuation

NOTES ON OSCILLOSCOPES

Baumer FWL120 NeuroCheck Edition Art. No: OD106434

SINAMICS S120 drive system

Hedging with Forwards and Futures

GUIDE GOVERNING SMI RISK CONTROL INDICES

Secure Election Infrastructures Based on IPv6 Clouds

Pulse-Width Modulation Inverters

Detection of DDoS Attack in SIP Environment with Non-parametric CUSUM Sensor

LEASING VERSUSBUYING

The Journey. Roadmaps. 2 Architecture. 3 Innovation. Smart City

Improvement of a TCP Incast Avoidance Method for Data Center Networks

MTH6121 Introduction to Mathematical Finance Lesson 5

II.1. Debt reduction and fiscal multipliers. dbt da dpbal da dg. bal

Internal and external value evaluation of E-business strategy in enterprise

PI4ULS5V202 2-Bit Bi-directional Level Shifter with Automatic Sensing & Ultra Tiny Package

Photo Modules for PCM Remote Control Systems

Answer, Key Homework 2 David McIntyre Mar 25,

Gate protection. Current limit. Overvoltage protection. Limit for unclamped ind. loads. Charge pump Level shifter. Rectifier. Open load detection

INTRODUCTION TO FORECASTING

ESIGN Rendering Service

UPDATE OF QUARTERLY NATIONAL ACCOUNTS MANUAL: CONCEPTS, DATA SOURCES AND COMPILATION 1 CHAPTER 7. SEASONAL ADJUSTMENT 2

Botnet Detection by Monitoring Group Activities in DNS Traffic

Analysis and Design of a MAC Protocol for Wireless Sensor etworks with Periodic Monitoring Applications

Transcription:

644 JOURNAL OF NETWORKS, VOL. 7, NO. 4, APRIL 22 A Graphical User Inerface in WLAN Monioring and Manageen Syse Jianao Gu College of Sciences, Hebei Unied Universiy, Tangshan, China gujianaolg@26.co Jun Zheng Finance Deparen, Hebei Unied Universiy, Tangshan, China ycw5@63.co Shufen Zhang College of Sciences, Hebei Unied Universiy, Tangshan, China zhsf@heuu.edu.cn Absrac This paper ais a providing a graphical user for WLAN onioring and anageen syse WLAN Inspecor, which gives newor operaors he sofware and perforance anageen ools necessary o onior and anage newor availabiliy, achieve real-ie onioring (7 24 hours) and inelligen anageen, repor on IP newors perforance, and roubleshoo issues hrough a single Web-based graphical user. The overall fraewor design of graphical, brief descripion of each odule, and he deailed design in he basic are discussed in his paper. The WLAN onioring and anageen syse has uliple funcions: real-ie newor onioring, real-ie proocol analysis,, saisics, safey esing and newor perforance onioring, ec. This syse can give Video Frae Capure for Mac, analyze he WLAN raffic characerisics, deec possible securiy vulnerabiliies, and give he appropriae soluion. Index Ters Graphical user, Wireless LAN, WLAN Inspecor, real-ie onioring. I. INTRODUCTION As IEEE 82. Wireless LAN (WLAN) echnology aures, he huge decline in he cos of WLAN devices, coupled wih is obiliy, flexibiliy, scalabiliy, ec., wireless local area newors (Wireless LANs) have been ore widely used as an exension, suppleen or replace of radiional wired newors in he enerprise, capus, and any oher places [-3]. However, due o open space of radio waves, design flaws of IEEE 82. proocol, low prices of equipen, as well as easy insallen, here are so any securiy probles of wireless LAN. The increasing populariy of wireless LANs brings a range of issues and challenges o newor and anageen. Fro he indusry o he research couniy, i is widely recognized difficulies of wireless LAN onioring and anageen, and a lo of research has begun. Recenly, wireless onioring is widely adoped in boh wireless research [4], and coercial WLAN anageen produc developen [5-6]. This paper ais a designing a graphical user in WLAN onioring and anageen syse WLAN Inspecor. The syse is designed o achieve real-ie onioring (7 24 hours) and inelligen anageen. I has uliple funcions: real-ie newor onioring, real-ie proocol analysis,, saisics, safey esing and newor perforance onioring, ec. This syse can give Video Frae Capure for Mac, analyze he WLAN raffic characerisics, deec possible securiy vulnerabiliies, and give he appropriae soluion. Syse feaures are as follows: Real-ie onioring (7 x 24 hours): The WLAN Inspecor syse suppors Large-scale enerprise wireless LAN real-ie onioring based on 82.a/b/g and 82.x sandards. I enables he adinisraor o fully grasp a variey of behavior and perforance of he WLAN. A variey of saisical funcions: Monioring he overall sae of he region o realize saisics. The failure of 82. conrol, daa and anageen fraes can be displayed. Node saisics funcion allows adinisraors o view daa according o nodes, including he upsrea and downsrea daa flow hrough he juncion. Auoaic inrusion deecion: I allows he user o pre-se securiy policy. Through real-ie securiy onioring soluions o give warning and prevenion recoendaions. Quicly find and fix he illegal equipen and AD-hoc devices: Illegal equipen is he firs WLAN securiy hreas. By using he pre-se sraegy need o run regular newor audiing of each device, his easure will help wih early deecion of illegal aciviies and possible equipen failure. Perforance Monioring: Real-ie onioring of overload APs, racing bandwidh issues, o deec any securiy configuraion probles, and doi:.434/jnw.7.4.644-65

JOURNAL OF NETWORKS, VOL. 7, NO. 4, APRIL 22 645 o achieve lin-layer analysis o a variey of saisical and found he source of he proble predicabiliy. The coplee noice on he relevan issue: Each policy and warning has a deailed descripion, including is causes and solving ehods. II. INTERACTIVE ARCHITECTURE As shown in Figure, he enire syse is divided ino wo pars, he graphical and he underlying odules. The graphical is responsible for copleing syse configuraion, achieving display and query funcions of resuls and alar. The underlying odule is responsible for receiving he configuraion coands, achieving generae and oupu funcions of onioring resuls and alar. To ainain wo connecions in he graphical and he underlying odules, one is used for he exracion of onioring and alar (defined as he firs connecion), he nex one for graphical ordering configuraion, sar and sop coands o underlying odule (defined as he second connecion). Using TCP approach, he graphical and he underlying odules are ainained by wo connecions. The underlying odule is in SERVER ode, he graphical is in CLIENT ode. The firs connecion is a long connecion, ha is, during syse operaion, his connecion has been ainained always, and he underlying odule will ae he iniiaive o push he onioring resuls o graphical ; The second connecion is a shor connecion ha requires he graphical o esablish a new connecion wih he SERVER of underlying odule, and he connecion will cu off afer using. The second connecion FIG.. Graphical Configuraion INTERACTIVE ARCHITECTURE III. GRAPHICAL INTERFACE SYSTEM STRUCTURE Here are naes for each progra wihin he procedures (including each odule and subrouine) and hierarchical relaionships beween he. Monioring resuls Underlying odule The firs connecion A. Overall fraewor design of graphical As shown in Figure, he graphical ainly consiss of five ajor coponen, hey are basic odules, channel, odules, equipen odules, alar odules and repor odules. The five ajor pars use coon daa o coplee he corresponding for daa display funcions. Basic Syse configuraion Channel Underlying- Main Device Daabase Alar Fig.. Overall fraewor design of graphical Reporing Module The five ajor pars lin hrough he ain wih he syse configuraion, and underlying daabase. I is an organic whole which is suppored by daa sources and underlying, and used dynaically displays as he hee wih configuraion anageen for he assisance. B. Brief descripion of each odule (a) Inerface odule: I is used as a conainer o unie basic ogeher wih channel, equipen and alar. I is responsible for esablishing pahs for daa ransfer of each odule, a he sae ie, for conrolling and onioring via low-level. (b) Underlying- odule: To ainain wo connecions in he graphical and he underlying odules. Using TCP approach, he graphical and he underlying odules are ainained by wo connecions. The underlying odule is in SERVER ode, he graphical is in CLIENT ode. The firs connecion is a long connecion, ha is, during syse operaion, his connecion has been ainained always, and he underlying odule will ae he iniiaive o push he onioring resuls o graphical ; The second connecion is a shor connecion ha requires he graphical o esablish a new connecion wih he SERVER of underlying odule, and he connecion will cu off afer using. (c) Syse configuraion odule: I is used o coplee syse operaion before and during he operaion of he basic configuraion, which includes he following configuraion: Device bloc configuraion; Legal device configuraion; Monioring paraeers configuraion; Counicaion configuraion;

646 JOURNAL OF NETWORKS, VOL. 7, NO. 4, APRIL 22 Alar configuraion; Channel configuraion.. (d) Daabase odule: I is daa-swiching cener of saving and reading of configuraion daa. I responsible for soring he daa flow fro he ino he daabase, and daa flow of syse configuraion, basic, channel, equipen and alar. (e) Main : As a conainer, i unifies ogeher wih basic, channel, equipen and alar, and is responsible for essaging in each odule, daa ransission and relaed configuraion processing. A he sae ie, i is responsible for conrolling and onioring he underlying WLAN conrol. Basic : Basic is responsible for presening a suary of which is oniored in 82. newors. As shown in Figure 2, he displayed includes: signaling, newor, newor proporion, warning essage, and device. Suary of Signal Inforaion signal inensiy curve, noise inensiy curve, signal noise curve, frae rae curve, byes rae curve, ec. Device Fig.4. The design of device Alar : I is responsible for displaying he alar lis. Alar AP device ree STA device ree SSID device ree Channel device ree Equipen Suary General Device Inforaion Inegraed alar display Alar records display Alar deails Blocing alar device Fig.5. The design of alar Basic Suary of Newor Inforaion Display of Newor proporion Suary of warning essage Reporing Module: I is responsible for exporing and previewing of device and alar, soring as a PDF docuen o reference for adinisraors, and o analysis newor saus and faul locaion. Expor and preview of device Fig.2. The design of basic Suary of Newor Inforaion is responsible for generaing newor suary showing he nuber of devices. Channel : I is responsible for displaying he channel deails in a paricular ype of newor (82.a, 82.b or 82.g). This par ainly shows he following conen: signal srengh, change rae of bye, channel suary and inegraed channel. Channel Proporion of warning essages Suary of device Signal srengh Change rae of bye Channel Suary Inegraed channel Fig.3. The design of channel Device : I is responsible for displaying he deails change on differen devices, including by AP, SSID, STA and channel. The displayed includes: Fig.6. The design of reporing odule C. Relaionship beween he various hread scheduling odule Main hread sar Reporing Module Configuraion Newor Suary Channel Device Alar hread Expor and preview of alar PDF repor odule Sar on deand Persisen connecion Sar on deand Exclusive Fig.7. Relaionship beween he various hread scheduling odule Child hread sar

JOURNAL OF NETWORKS, VOL. 7, NO. 4, APRIL 22 647 Figure 7 illusraes he syse relaionship beween he various hread scheduling odule. The ain hread is responsible for he iniializaion of he graphical and for he scheduling of oher hreads wor. When you need o configure he syse paraeers, configuraion hread will sar, and independen wih oher hreads. When he onioring progra sars, newor hread will sar, and independen wih oher hreads. If and only if he onioring progra is in sar sae, here only one hread is acive in suary hread, channel hread, equipen hread, and alar hread, o ensure efficien use of syse resources. IV. THE DETAILED DESIGN OF SIGNAL INFORMATION SUMMARY IN THE BASIC INFORMATION INTERFACE A. Suary of Signal Inforaion is affiliaed o basic. B. Descripion I is responsible for giving disincion according o he newor ypes, and real-ie refreshing he display of each channel's signal srengh, noise level and SNR (Signal o Noise Raio) siuaion. C. Display 82.a: Signal srengh for each channel; Inensiy noise for each channel; SNR for each channel. 82.b: Signal srengh for each channel (-4); Inensiy noise for each channel (-4); SNR for each channel (-4). 82.g: Signal srengh for each channel (-4); Inensiy noise for each channel (-4); SNR for each channel (-4). User can choose o display as percenage or db fora, and can swich beween differen displays. When displaying a percen value, daa inpu is x = + x, dynaic ap display range fro -, - changed o,. When displaying he raw daa, daa inpu is he daa of he underlying, which reains unchanged. D. IPO (Inpu-Process-Oupu) Model of funcional descripion I: Differen newor ypes of signal srengh, noise level and signal o noise raio which are real-ie obained fro he daabase; Selec resuls of percenage or db fora: newor ype selecion P: Colunar show signal srengh, noise level and signal o noise raio, and refresh every second O: Displaying colun ap Fig.8. IPO odel of funcional descripion E. Algorih and process logic Algorih: () Sar BarPanel class; (2) Sar he rigger oniors and essage diges, se he ype of daa needs o be read; (3) Iniialize he daabase connecion, read he dae of signal, noise and SNR. (4) If displaying a percen value, in accordance wih he way of daa processing as in Secion IV, or urn (5); (5) Graphical display. Logical flow of he algorih is shown below. Clear or updae he original daa Sar onioring Yes Se display ypes Read daa fro he daabase Wheher displaying a percen value Yes Process he daa as percenage Call graphics o display Fig.9. Process logic No, exi Sar essage diges F. Inerface SarLefPanel parenpanel = null; MainWlanFrae grandfaherpanel = null; SarBardaaGeneraor gen; SarBarChar signalbar, noisebar,snbar; DefaulCaegoryDaase asignaldaase = new DefaulCaegoryDaase anoisedaase = new DefaulCaegoryDaase asndaase = new DefaulCaegoryDaase bsignaldaase = new DefaulCaegoryDaase bnoisedaase = new DefaulCaegoryDaase bsndaase = new DefaulCaegoryDaase gsignaldaase = new No

648 JOURNAL OF NETWORKS, VOL. 7, NO. 4, APRIL 22 DefaulCaegoryDaase gnoisedaase = new DefaulCaegoryDaase gsndaase = new G. Tes plan () The progra needs o coninuous, long- run in he acual newor, by he logic analysis of daa o es he sabiliy, logical correcness, ease of use of he progra; (2) Using a dedicaed es equipen o do sress es of he progra. V. THE DETAILED DESIGN OF NETWORK INFORMATION INFORMATION SUMMARY IN THE BASIC INFORMATION INTERFACE A. Suary of Signal Inforaion is affiliaed o basic. B. Descripion I is ainly used o display newor suary in 82. newors, including he nuber of newor (SSID nuber and he nuber of Ad-hoc), he nuber of devices (AP nuber, STA nuber, he nuber of encryped AP and STA), he nuber of daa frae (he nuber of broadcas fraes, ulicas fraes and unicas fraes). C. Display 82. Wireless newor : SSID nuber: SSID nuber in he onioring region; Ad-hoc nuber: Ad-hoc nuber in he onioring region; Devices nuber: Devices nuber found in he onioring region. () The nuber of AP (encryped AP and unencryped) found in he onioring region; (2) The nuber of STA (encryped AP and unencryped) found in he onioring region. The nuber of daa fraes: The nuber of daa frae found in he onioring region. () The nuber of broadcas frae found in he onioring region; (2) The nuber of ulicas frae found in he onioring region; (3) The nuber of unicas frae found in he onioring region. D. IPO (Inpu-Process-Oupu) Model of funcional descripion I: The nuber of SSID, Ad-hoc, devices and dae fraes in an 82. newor which are real-ie obained fro he daabase P: TreeLis show he nuber of SSID, Ad-hoc, devices and dae fraes, and refresh every second O: Displaying TreeLis. Fig.. IPO odel of funcional descripion E. Algorih and process logic Algorih: () Sar SuaryInfo class; (2) Sar he rigger oniors and essage diges, se he ype of daa needs o be read; (3) Iniialize he daabase connecion, read he dae of SSID nuber, Ad-hoc nuber, AP nuber, encryped AP nuber, unencryped AP nuber, STA nuber, encryped STA nuber, unencryped STA nuber, and dae frae nuber; (4) Graphical display. Logical flow of he algorih is shown below. Clear or updae he original daa Sar onioring Yes Read daa fro he daabase Call graphics o display Fig.. Process logic No, exi F. Inerface SarLefPanel parenpanel = null; MainWlanFrae grandfaherpanel = null; SuaryInfoTree suaryinfotree = null; Sar essage diges G. Tes plan () The progra needs o coninuous, long- run in he acual newor, by he logic analysis of daa o es he sabiliy, logical correcness, ease of use of he progra; (2) Using a dedicaed es equipen o do sress es of he progra. VI. THE DETAILED DESIGN OF NETWORK PROPORTION INFORMATION SUMMARY IN THE BASIC INFORMATION INTERFACE A. Suary of Signal Inforaion is affiliaed o basic. B. Descripion I is ainly used o display newor proporion of corresponding devices. C. Display The percenage of SSID Coun according o SSID device nuber; The percenage according o he nuber of differen ypes of devices; The percenage of AP nuber according o differen ypes of newors;

JOURNAL OF NETWORKS, VOL. 7, NO. 4, APRIL 22 649 The percenage of STA nuber according o differen ypes of newors; The percenage of AP nuber according o differen ypes of encrypion; The percenage of STA nuber according o differen ypes of encrypion; The percenage of dae frae nuber according o differen ypes of differen ypes of daa ransission. D. IPO (Inpu-Process-Oupu) Model of funcional descripion I: The nuber of SSID, Ad-hoc, devices and dae fraes in an 82. newor which are real-ie obained fro he daabase P: Pie chars show he proporion of SSID nuber, Ad-hoc nuber, devices nuber and dae fraes nuber O: Displaying Pie chars Fig.2. IPO odel of funcional descripion E. Algorih and process logic Algorih: () Sar LefPanel class; (2) Sar he rigger onior and nodes in a ree lis, and choose o lisen; (3) Iniialize he daabase connecion afer seleced node even riggered; read he differen dae according o differen nodes; (4) Graphical display. Logical flow of he algorih is shown below. Clear or updae he original daa Sar onioring Yes Se display ypes Read daa fro he daabase Call graphics o display Fig.3. Process logic No, exi F. Inerface SarLefPanel parenpanel = null; MainWlanFrae grandfaherpanel = null; SarPieChar sarpie = null; CharDaaGeneraor gen = new CharDaaGeneraor(); gen.gessiddaase(); gen.geadhocdaase(); gen.gedevicedaase(); gen.geapdaase(); gen.gestadaase(); gen.geencryapdaase(); gen.geencrystadaase(); gen.gefraedaase(); G. Tes plan () The progra needs o coninuous, long- run in he acual newor, by he logic analysis of daa o es he sabiliy, logical correcness, ease of use of he progra; (2) Using a dedicaed es equipen o do sress es of he progra. VII. TECHNICAL FEATURES AND INTENDED USE According o he 82. frae fora, parse all ypes of daa fraes capured in he WLAN, exrac he newor ID and newor raffic, provide friendly and siple graphical. Maing use of specific characerisics and ideniy of Securiy vulnerabiliies and specific raffic odel, deec he Possible WLAN securiy hreas and hacing, give warning essage. Based on 82. Proocol, consruc special anageen fraes, bloc he illegal equipen so as o disconnec o original AP. Inended use of he WLAN onioring and anageen syse WLAN Inspecor are as follows: WLAN planning and opiizaion (perforance evaluaion); Traffic analysis and conen analysis; Aac onioring and rogue access poin discovery; Flow bloc (or aac AP node, o degrade he newor perforance ); Perforance onioring and faul locaion. In Traffic analysis, raffic erics a applicaion level are criical for proocol research, abnoriy deecion, accouning and newor operaion. There are grea challenges o idenify paces a applicaion level since dynaic proocol pors and pace encrypion are deployed popularly. There are several differen ehods of raffic idenificaion being proposed in recenly research for corresponding applicaions. I is ipossible o idenify raffic wih any one ehod alone. There are several advanages in MPI: () hese exising raffic idenificaion ehods can be easily inegraed ino MPI o iprove he idenificaion accuracy; (2) he corresponding new idenificaion ehod for he new applicaion can be insered ino MPI feasibly wih scrips of he idenificaion rule; (3) efficiency of idenificaion can be iproved wih he echanis of adapive jusificaion for he sequence of ehods and ipleened on uli-cpus plafor. MPI has been ipleened a general purpose CPU plafor wih OC-48 POS and GE newor. Experien on an OC-48 POS bacbone lin shows MPI is accurae and effecive for raffic idenificaion. We propose a scalable and efficien ehodology for accurae raffic idenificaion in he following. These exised idenificaion ehodologies can be inegraed ino MPI sealess o iprove he accuracy of raffic classificaion. The idenificaion rules are expressed in scrips. The analysis phases can be jusified o opiize

65 JOURNAL OF NETWORKS, VOL. 7, NO. 4, APRIL 22 he perforance of raffic easureen. The idenificaion rules are expressed ino a ex file wih XML lied scrip language in order o updae he rules flexibly for new applicaions and proocols. Once he raffic easureen process sars up, he ex file of rules is loaded ino eory in he iniial phase. Every pace and flow is idenified according o he rules in he eory. The accuracy and efficiency are wo iporan erics for evaluaing he raffic idenificaion ehodologies. I is very difficul o evaluae he accuracy of he idenificaion ehodologies due o lac of he well approbaory benchar races. In a cerain exen, he accuracy and he efficiency are conradicory each oher. In order o idenify raffic on high speed lin on line, soe idenificaion ehodologies wih high accuracy bu ore ie coplexiy canno be applied. In his secion, an opiizaion ehodology for iproving he efficiency is presened. Soe paraeers are denoed as Table IV. The ie during he period [, ] spen in idenifying flows of applicaion ype wih he ehod i is presened as forula (). T = ( * v ) d () i i i So he oal ie is suaion of ie wih all ehods as forula (2). n n i i i i= i= (2) T = T = ( * v ) d Noice ha i is liely ha a flow is idenified as a ind of applicaion ype afer processing by several ehodologies. In he ideal siuaion, he os appropriae ehodology can always be seleced for every flow for he efficiency and accuracy. The ie expense for raffic idenificaion in his bes siuaion is showed as forula (3). n i= T = v d (3) ( * ' i i ) Obviously, T T. The opiizaion process is proposed o decrease he ie expense of raffic idenificaion. Supposed he idenificaion procedures for a flow is subse of he ehods sequence <M, M 2,, M n >. If for he flow belonging o applicaion ype, he idenificaion ehod of he applicaion ype denoing as M ', and M ' = M q. (4) The ie for idenifying he flow is as forula (5). q [ ] = (5) i i= Replace forula (5) ino forula (2). I is easy o now he oal ie expense is presened as forula (6). [ ] ( [ ]* ) = = (6) T = T = f d To siplify he calculaion process, suppose he [] is independen wih he raffic rae under easureen. Tha is o say [] is independen wih he ie of day. So, forula (6) can be ransfored as forula (7). T = = = In forula (7), = = = T[ ] ( [ ]* fd ) ( [ ]* a) a (7) = f d is he oal nuber of flows of applicaion ype. So, i is easy o now ha he oal nuber of flows in he period is = f d. The goal of opiizaion is o find a schee, which is a ehods sequence in he specific order, wih he inial value of T, viz. < M ' ' ', M2,..., Mn >, <M, M 2,, M n >, T ' T. To reove he effec of absolue size of flow rae, T in forula (7) is divided wih he nuber of ' flows as forula (8). If only if T T, T' T. ( ) T [ ] [ ]* fd = = T = = = r F = fd = ( [ ]* ) ) where r is he proporion of he flows of applicaion ype in all applicaions. In a bacbone newor, he r is coparaively sable lasing a long ie. We can easure he r and i for every applicaion ype for a lin under easureen and find a ehod sequence wih he inial value of ie expense as he bes schee. There are! ehod sequences in oal and for every ehod sequence i is easy o calculae is T, hen we can selec he ehod sequence wih he inial value. VIII. RELATED WORK There are los of wors on he WLAN Monioring and Manageen Syse recen years since here are ore and ore applicaions using dynaic proocol pors bringing grea challenge o i [7-9]. Moorola AirDefense Mobile[] can be insalled on lapops running Windows XP or 2 wih an Aherosbased 82. a/b/g newor card, such as Negear (WAG5) or Cisco (CB2AG). The ool allows onioring of raffic on he WLAN and erinal connecions as well as diagnosics for roubleshooing. Focusing heavily on securiy, he produc has ore han 75 various ypes of alars, including alars for rogue access poins and isconfigured devices. Unlie AirDefense, Moorola SieScanner [], is based specifically on he onioring of newor perforance and coverage. SieScanner can be used o easure facors such as daa raes, signal srengh and noise level a seleced sies. Traffic generaed by erinals can also be used o easure delay, jier and (8

JOURNAL OF NETWORKS, VOL. 7, NO. 4, APRIL 22 65 reransissions, if a receiving server has been specified and conneced o he newor. The produc requires he Windows XP operaing syse. AirMagne WiFi Analyzer [2], is anoher lapopbased sofware allowing horough exainaion of he air. The sofware includes feaures for he onioring of boh he radio and he fixed infrasrucure, such as daa rae and he rae of perforance of DHCP and ping coands. Monioring of signal srengh and noise level is also possible, along wih he conrol of newor securiy by idenifying isconfigured devices and devices sending unencryped daa. Locaing is also possible. WiFi Analyzer runs on boh Windows and Mac operaing syses bu is only copaible wih cerain newor cards. The produc is said o be exreely easy o use, offering an inuiive user and ools for he rapid roubleshooing of coon newor probles wihou he need o chec individual paces [3]. Anoher popular WLAN analyser is he WildPaces OniPee [4], which enables he horough analysis of paces sen over he air. The produc is designed for he on-sie roubleshooing of probles on he radio. Therefore, i naurally displays he access poins and erinals as well as saisical daa on raffic, including uilisaion rae and nuber of reransissions. According o [3] i is he bes ool for roubleshooing probles on he air wih is versaile funcions and paricularly exensive filering properies. Wireshar [5], is an open source sofware for Windows and Linux copuers for he analysis of newor proocols. Wireshar allows he sraighforward analysis of raffic on he copuer in quesion, bu is no so well suied o he coprehensive analysis of WLANs. Analysis of conrol and beacon fraes requires use of he onioring ode, which is no suppored by all operaing syses, adapers and drivers. Furherore, physical variables are no available, including he channel used, signal srengh and used daa rae, which is criical in perforance analysis. I is claied ha he capure of reransissions requires uli-sage configuraion [3]. Wireshar s user-friendliness can be considerably iproved by cobining i wih AirPcap USB adaper[6], which is a coercial soluion. This will also enable he analysis of physical-level daa, such as he signal srengh of individual fraes and used daa rae. MeaGee offers he Wi-Spy produc suie, wih DBx as is os advanced coponen [7]. DBx is a specru analyser operaing in he 2.4 and 5 GHz frequency ranges, allowing he selecion of he opial channel for auonoous access poins and he idenificaion of he noise level caused by nearby access poins. The benefis of he produc in conroller-based environens are perhaps unclear. Differing fro he oher onioring sofware, WLAN Inspecor, offers qualiy of service onioring fro he end-user perspecive. Newor perforance is oniored auoaically round he cloc. The produc is he firs end-o-end qualiy onioring sofware cobining he onioring of wireless and fixed newor infrasrucure. I is rue a leas in he respec ha oher onioring sofware ofen lacs a onioring perspecive, focusing only on seleced pars, such as individual newor eleens in he case of SNMP sofware and he curren in he case of wireless sie survey ools. WLAN Inspecor ain is he priary you use, his provides you wih all he conrol opions. Through a siple, easy and friendly, you can easily use he WLAN Inspecor sofware. ACKNOWLEDGMENT This wor was suppored by Projecs of Hebei Province Educaion Deparen (Z226) and Research Projec of Hebei Unied Universiy (z276). REFERENCES [] Jihwang Yeo, Mousafa Youssef, Asho Agrawala. A fraewor for wireless LAN onioring and is applicaions. In Proceedings of he Third ACM Worshop on Wireless Securiy (WiSe\'4), Ocober 24. hp://www.cs.ud.edu/~ousafa/papers/wise4.pdf [2] Kiasua, T. Naanishi, T. Fuuda. A Wireless lan based indoor posiioning syse wips and is siulaion. Counicaions, Copuers and signal Processing, Aug. 23, vol.pp. 272-275. [3] Ahavaara, K. Haverinen, H. Pichna, R. Inerworing archiecure beween 3GPP and WLAN syses. Counicaions Magazine, IEEE, Nov. 23, Volue 4, Issue, pp.74-8. [4] M. Shin, A. Mishra, and W. Arbaugh. Iproving he Laency of 82. Hand-offs using Neighbor Graphs. In Proc. INFOCOM 24, Hong Kong, China, March 24. [5] Enerprise Wireless LAN Securiy and WLAN Monioring. hp://www.airdefense.ne/ [6] Wireless Securiy Audior (WSA). hp://www.research.ib.co/gsal/wsa/ [7] Moore, A., Papagiannai, K.: Toward he Accurae Idenificaion of Newor Applicaions. In: Proceedings of PAM (25) [8] Karagiannis, T., Broido, A., Brownlee, N., Claffy, Kc., Falousos, M.: Is P2P Dying or Jus Hiding. In: Proceeding of IEEE Globeco, Dallas (24) [9] G Zhang, G Xie, J Yang, Y Min, e al. Accurae Online Traffic Classificaion wih Muli-phases Idenificaion Mehodology. Consuer Counicaions and Neworing Conference, Jan 28, pp. 4-46. [] hp://www.airdefense.ne/producs/adobile/ [] hp://www.oorola.co/business/usen/business+prod uc+and+services/sofware+and+applicaions/newor+d esign+sofware/siescanner+sofware_us-en [2] hp://www.airagne.co/producs/vofi_analyzer [3] B. Miller. Choosing he Righ Analyzer for Your WLAN. Exper Reference Series of Whie Papers, Global Knowledge, July 29. [4] hp://www.wildpaces.co/producs/disribued_newor _analysis/onipee_newor_analyzer [5] hp://www.wireshar.org [6] hp://www.caceech.co/producs/airpcap.hl [7] hp://www.eagee.ne/producs/wi-spy-dbx