Application layer-based data segmenting method and device thereof

Abstract

The invention discloses an application layer-based data segmenting method which is applied to depth detection equipment. The method comprises the following steps of: detecting whether the data flow of the user is a data flow with a dialogue by the depth detection equipment and if so, acquiring the segmental characteristics corresponding to the data flow; segmenting the data flow according to the received segmental characteristics by the depth detection equipment to acquire a depth detection unit; and detecting the depth of the depth detection unit by the depth detection equipment. The method can highly effectively solve the segmental problem of the depth detection data of the application layer equipment, match the depth detection unit with the resolving process of the majority of protocols, prevent the data packet of the protocols from being analyzed and be used for depth detection-based reorganization of an engine and flow detection-based establishment and destruction of the detected flow of the engine, thus significantly improving the precision and efficiency of the detection.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to an application layer-based data segmentation method and device. Background technique [0002] With the development of the network, there are more and more services at the application layer (above layer 4). Devices based on the application layer, such as IPS (Intrusion Prevention System, intrusion prevention system), bandwidth management equipment, etc., need to perform in-depth packet inspection. In addition to analyzing the content below layer 4 of IP packets (including source address, destination address, source port, destination port and protocol type), text detection also adds application layer analysis to identify various network applications and their contents. [0003] When performing in-depth inspection on packets, it is necessary to reorganize and copy packets according to different protocols, that is, to copy multiple data packets to the memory for reasse...

AI Technical Summary

Problems solved by technology

However, the application protocol analysis is very expensive, and specific analysis of these known protocols is required, and it cannot achieve universality and efficiency.

Images