Modeling for Traffic Replay in Virtual Network<bold> </bold>

Replaying traffic in a virtual network based on IP-Mapping not only helps the traffic play its full data value but also helps the virtual network enhance the authenticity by introducing the background traffic and fully restoring the actual details of the behavior to be studied. Replaying traffic in the virtual network should first establish the mapping relationships between the IP addresses in traffic and virtual nodes of virtual networks. In this paper, we propose a generalized modeling approach for replaying traffic in a virtual network constructed by network emulation platforms. Any traffic captured or generated by only one or multi-interfaces could be replayed by virtual nodes based on IP mapping. IP addresses in traffic will be divided into disjoint sets based on the graph coloring algorithm in which IP addresses in the same set will not communicate with each other, and IP addresses in different sets will communicate with each other through a certain network interface. Modeling of the virtual network will calculate the communicating relationships between virtual nodes through a certain virtual network interface based on a hierarchical algorithm. It is proved to be a fundamental and general modeling approach for mapping the endpoint in traffic to the virtual nodes. We replay LLS DDOS 1.0 in a certain virtual network as a case to demonstrate the modeling process of our approach.<bold> </bold>