Deep packet inspection method and device

Abstract

The invention relates to the field of data communication, in particular to a deep packet inspection method and a device. A feature character configuration file is operated in a server for configuring a file to identify the type of a packet. The method comprises the following steps: the server firstly carries out inspection of bearer type service feature characters on the packet according to the feature character configuration file, if the inspection result confirms the bearer type service, the inspection of nested type service feature characters is further carried out on the packet according to the settings of the feature character configuration file. The method and the device respectively carry out bearer type and nested type service inspection on the packet by configuring progressive search relationship, thereby improving the inspection hit rate. Furthermore, the combination of the feature characters is simple, the modification is easy and the expansion is convenient.

Description

technical field [0001] The invention relates to the field of data communication, in particular to a deep message detection method and device for improving the hit rate of message detection in a business identification and control system. Background technique [0002] With the rapid development of Internet technology, more and more content is carried on the network, and network service providers provide customers with more and more service content, and these services can be divided into different applications. This requires network devices to provide more complex packet processing capabilities, distinguish different applications, and provide different levels of bandwidth for different applications. [0003] In the past, network devices used packet header information below layer 4 to distinguish unused applications. Commonly used layer 2 MAC addresses and quintuples were used. However, as network applications become more and more abundant, different applications cannot be com...

AI Technical Summary

Problems solved by technology

The current deep packet detection methods are relatively simple based on the combination of one or more feature words, which is difficult to detect nested services

[0006] In the existing technology, in order to be able to detect real services, complex signature combinations are usually configured for detection, which will greatly affect the performance of the software, such as reducing the speed of signature search and message forwarding, etc. There will be packet loss in the case of

And if there are multiple nested businesses, it will be even harder to detect

Images