the quality and stability of network is more and more important. When DNS
SYN flood attacks network
it will occupy existing bandwidth
the impact of network quality
and traditional firewall is very difficult to effectively address such attacks
therefore
the network abnormal traffic monitoring and traceability of great significance. This paper describes the construction of abnormal network traffic analysis systems for program monitoring and traceability
described the working principle and implementation methods
combined with network data on the implementation of the existing network effect of the system are summarized and discussed.