Abstract: In current worm simulation, network simulators drop the scanning packets sent to invalid IP addresses, which will underestimate the traffic brought by worm. This paper focuses on the problem, introduces a modified routing strategy for worm simulation and implements the idea in the network simulator GTNetS. In order to quantitatively compare the differences between original routing strategy and the modified one, an ideal model is presented and several experiments are made. Simulation results show that worm traffic is more accurately reflected after routing strategy is modified.

Key words: worm simulation, routing strategy, network traffic

摘要： 蠕虫模拟时产生的无效IP地址扫描包会在源节点所属的路由器被直接丢弃，这与实际网络中数据包的传输情况差距较大。该文针对这一问题提出改进路由策略的方法，并实现对模拟器GTNetS路由策略的修改。为量化改进路由策略前后的区别，给出一个理想的假设模型，并进行模拟实验。实验结果与模型的理论值相符，改进路由策略后能够更准确地反映蠕虫数据包在网络中的传输。

关键词: 蠕虫模拟, 路由策略, 网络流量

CLC Number: 

• TP309