| In the national power system’s process of promoting the construction of smart grid dispatching control system, how to ensure the security of power dispatching data network has always been a hot research issue. At present,among the access part of in the three-layer structure of the entire power dispatching data network, the construction security monitoring and protection system construction has been relatively perfect in the core layer and the convergence layer because of the high security levels,however,the majority of power stations that belong to the acess vast access layer haven’t been provided with an universal self-network-protection capability for various reason.In order to improve the fault diagnosis and abnormal behavior self-judgment of the access layer power station to its own dispatching data network, a new design of the network monitoring device is shown in this paper.This technique is based on the software and hardware working platform of embedded Linux,The bypass monitoring technology which has been universally in the field of small-area LAN security monitoring is adopted in this project as well as some other network technology, which has been widely used in the field of small LAN security monitoring is adopted in this project as well as some other network diagnostic tools such as Tcpdump.The completed network monitoring system is able to detect the data link on/off status of each network device and monitor the network traffic status of each remote teminal unit distributed in the dispatching data network.By analyzing the source IP address,target IP adddress,communication time and transmission data amount in each monitoring result,it is judged whether ther are abnormal network behaviors such as illegal communication operations,data transmission tuner disconnection and denial of service attacks in the current network.In addition,a monitoring interface runs on upper computer has also been made based on the "client/server"network architecture,which can conveiently and intuitively preset the collected data information and sent the abnormal alarms to the station superviors so they can handle these in time .Finally,the prototype of the network monitoring deviceis tested.The test results show that the device is reliable and eeffective,and it can make a more accurate judgment on network faults and abnormal behaviors.which helps to enhance the ability of the power station to identify and control the working condition of its own network. |