Method for recognizing flux based on characteristic library

Abstract

The invention discloses a traffic identification method based on a feature library, which comprises the following steps: the generation of the feature library, the loading of the initialized feature library, traffic identification of the feature library, and on-line maintenance of the feature library. A network application protocol can configure a plurality of feature value descriptions, and features can be concurrently matched in a coprocessor which supports quick content lookup, so the traffic identification method based on the feature library not only effectively improves the accuracy of the traffic identification, but also improves the performance of the traffic identification. A manager can browse each application in the feature library, modify the name of each application, and add or delete each application through a management interface through management interface; for each application in the feature library, the manager can edit any existing feature string and can add or delete the feature string; and all the modification to the feature library can be loaded to the coprocessor which supports the quick content lookup in a real-time mode after the manager confirms, thereby obtaining effective improvement on the expansibility of the traffic identification.

Description

technical field [0001] The invention relates to a method for accurate traffic identification in a communication network, in particular to a method for realizing accurate traffic identification by flexibly using an application feature library for the characteristic that application features in the communication network are often changed. It belongs to the technical field of network protocol analysis. Background technique [0002] With the increase of Internet bandwidth, there are more and more types of network applications. The emergence of new services has greatly promoted the development of the network, but at the same time it has changed the existing network traffic model and brought new challenges to network management and traffic monitoring. Research on traffic identification methods helps administrators understand the distribution of traffic carried in the network, further understand the impact of application traffic growth on network performance, and assist in better ...

AI Technical Summary

Problems solved by technology

[0024] The purpose of the present invention is to overcome the shortcomings of simplicity and low accuracy existing in the port-based traffic identification method in the prior art, because the traffic feature identification method needs to carry out comprehensive inspection and analysis on the internal data of the message, and realize The shortcomings of low efficiency and affecting business performance, and the shortcomings of the identification method based on protocol flow analysis in terms of scalability and timeliness, provide a feature library-based traffic flow analysis method for the characteristics of frequent changes in application characteristics in communication networks. recognition methods

Images