基于SNMP的拓扑增强识别算法①曾戈,李银,李睿(东莞理工学院网络空间安全学院,东莞523808)通信作者:李睿,E-mail:ruili@dgut.edu.cn摘要:网络拓扑发现对于许多关键网络管理任务来说至关重要.然而,随着网络规模的不断增大,网络结构的愈发复杂,之前的基于SNMP的网络拓扑发现算法存在难以有效识别子网类型和多IP设备,拓扑效率、准确率低等问题.针对上述问题,本文提出了基于SNMP的拓扑增强识别(SNMP-basedtopologyenhancedidentification,SNMP-TEI)算法.首先,启发式地确定子网IP地址并对其发送探针,根据探测结果来判断子网类型,在确定子网类型后及时终止探针注入防止网络负载过大;其次通过MIB-II记录的系统信息设置设备指纹,结合设备类型识别算法对终端主机IP进行设备指纹鉴定,以达到识别多IP设备的目的.实验结果表明,此方法在仿真网络中可有效识别子网和多IP设备,同时降低了网络负载,探测准确率达到了96.43%.关键词:网络管理;SNMP;网络拓扑发现;子网识别;多IP设备识别引用格式:曾戈,李银,李睿.基于SNMP的拓扑增强识别算法.计算机系统应用,2023,32(2):226–233.http://www.c-s-a.org.cn/1003-3254/8993.htmlSNMP-basedTopologyEnhancedIdentificationAlgorithmZENGGe,LIYin,LIRui(SchoolofCyberspaceSecurity,DongguanUniversityofTechnology,Dongguan523808,China)Abstract:Networktopologydiscoveryisimportantformanykeynetworkmanagementtasks.However,asthenetworkscaleexpands,thenetworkstructuregetscomplex.ThepreviousSNMP-basednetworktopologydiscoveryalgorithmscannoteffectivelyidentifysubnettypesandmulti-IPdevices,andtheyhavelowtopologyefficiencyandaccuracy.Inviewoftheaboveproblems,thisstudyproposesanSNMP-basedtopologyenhancementidentification(SNMP-TEI)algorithm.Firstly,thesubnetIPaddressisheuristicallydetermined,andprobesaresenttoit,soastojudgethesubnettypeaccordingtothedetectionresults.Inaddition,probeinjectionisstoppedinatimelymannerafterthesubnettypeisdetermined,soastopreventthenetworkloadfrombeingtoolarge.Secondly,thedevicefingerprintissetthroughsysteminformationrecordedbyMIB-II,andadevicetypeidentificationalgorithmisusedtoidentifythedevicefingerprintoftheterminalhostIP,soastoidentifymulti-IPdevices.Theexperimentalresultsshowthatthismethodcaneffectivelyidentifysubne...
