Method and equipment for rapidly resolving protocol based on carriage returns and line feeds

Abstract

The invention relates to a method and equipment for rapidly resolving a protocol based on carriage returns and line feeds. The method comprises the following steps of: searching a keyword of a protocol character stream by using a state machine; once a character is not matched with a state in the state machine, searching a carriage return-linefeed character starting from the mismatched character; continuously searching the keyword of the protocol character stream starting from the next character of the carriage return-linefeed character by using the state machine; and during the process of searching the keyword of the protocol character stream by using the state machine, if one or more characters of the protocol character stream are fully matched with one branch in the state machine, judging the one or more characters to be the keyword so as to finish resolving the protocol. Compared with the conventional method for resolving the protocol by using the state machine, the method for resolving the protocol provided by the invention has the advantage of greatly improving the protocol resolution speed, so the method for resolving the protocol can be widely applied to quick network protocol resolution.

Description

technical field [0001] The invention relates to computer networks, in particular to network protocol analysis. Background technique [0002] In a computer network, two entities that communicate with each other are located in different geographical locations, and the two processes on them communicate with each other. They need to coordinate their actions by exchanging information to achieve synchronization, and the information exchange must be in accordance with a pre-agreed agreement. Different computers must use the same network protocol to communicate. This kind of rules, standards or conventions established for data exchange in the network are called network protocols. [0003] A network protocol refers to a collection of communication rules between all devices on the network, such as network servers, computers and switches, routers, firewalls, etc. It specifies the format that information must use during communication and the meaning of these formats. [0004] The chara...

AI Technical Summary

Problems solved by technology

At present, there are two methods for protocol analysis. One is to search each character in the character stream one by one according to the provided keyword. This search method needs to search the character stream for each character in each provided keyword. Therefore, it is necessary to scan the character stream multiple times, and the search speed is very slow, which is rarely used at present; another method is the state machine method, which only needs to scan the character stream once, thus speeding up the keyword search speed, but this method is still It needs to be scanned character by character, which restricts the protocol parsing speed to a certain extent

Images