By research of the current network traffic idenfication methods and typical network user behavior analysis methods,a online network user behavior analysis model has been designed and implemented. In order to achieve internal network user behavior real-time monitoring and online analysis purposes.