DNS Traffic Monitoring: Waveform Analysis for Detecting Suspicious Activity
摘要
This research paper presents an in-depth analysis of network performance and security by leveraging two key algorithms: DNS Traffic Analysis and Packet Drop Rate and Efficiency Calculation. The DNS Traffic Analysis algorithm identifies suspicious DNS traffic patterns by examining port numbers, grouping data by source and destination IP addresses, and flagging anomalies based on response times and packet lengths using z-scores. This approach aids in detecting potential security issues, such as DNS spoofing and anomalous network behaviors. The second algorithm focuses on evaluating the overall efficiency of the network by calculating packet drop rates and identifying causes of performance degradation. With an alarming 28.84% packet drop rate and 71.16% network efficiency, the study highlights significant issues in packet delivery and network stability. The findings suggest that addressing issues such as network congestion, outdated hardware, and poor Quality of Service (QoS) management can help mitigate packet loss and enhance overall network performance. By providing comprehensive insights into both performance and security aspects, this research offers practical recommendations to improve network reliability and optimize user experience in a connected environment.