With the development of communication

the quality and stability of network is more and more important. When DNS

SYN flood attacks network

it will occupy existing bandwidth

the impact of network quality

and traditional firewall is very difficult to effectively address such attacks

therefore

the network abnormal traffic monitoring and traceability of great significance. This paper describes the construction of abnormal network traffic analysis systems for program monitoring and traceability

described the working principle and implementation methods

combined with network data on the implementation of the existing network effect of the system are summarized and discussed.