Method for identifying flow of P2P (peer-to-peer) stream media in unknown flow

Abstract

The invention provides a method for identifying the flow of a P2P (peer-to-peer) stream media in an unknown flow. The method comprises the steps of firstly counting a mass of P2P stream media data streams which comprise various applications, extracting the lengths of the grouped loads as parameters, and deducing various application samples which accord with the interval discrete distribution characteristics; inputting the UDP (user datagram protocol) flow of a transmission layer in an unknown flow by taking the data stream as a unit, extracting each group to obtain the lengths of the loads ofthe group, obtaining the prior probability value of the group which belongs to each application according to the application samples, computing the posterior probability value which belongs to each application by the Bayesian formula, and selecting a maximum value; defining the confidence level value which expresses that the data stream belong to some application, and taking the maximum value of the posterior probability and a mean value selected by the iteration as a current confidence level value of the data stream; and comparing the current confidence level value of the data steam with a preset judgment threshold value to judge the data stream-belonged application classes. The method is fast in processing speed, small in memory space, and wide in application range.

Description

technical field [0001] The present invention relates to a traffic identification technology, specifically, to a method for identifying peer-to-peer P2P (Peer to Peer) streaming media traffic in unknown traffic based on behavior characteristics, and belongs to the technical field of network interconnection communication. Background technique [0002] In recent years, with the continuous development of P2P technology, a large amount of P2P application traffic occupies a huge bandwidth of network egress, which directly affects people's study, work and life, and also brings social impacts in other aspects (such as copyright and security, etc.). to some negative impact. P2P streaming media application is just one of many P2P application fields. Because P2P streaming media system requires less resources, it can greatly reduce the pressure on the central server and avoid single point of failure. These characteristics make it very frequent and widely used. applications, occupy a co...

AI Technical Summary

Problems solved by technology

However, this technology also has the following disadvantages: the recognition efficiency is low, because it needs to enter the application layer for protocol analysis and feature matching, so its calculation and storage overhead is large, and its scalability is poor

[0014] Both of the above two technologies have the advantages of high performance and easy implementation, and have properly described the characteristics of P2P traffic. However, they still cannot distinguish different traffic from traditional servers (such as mail), and the selection of the recognition threshold is also difficult. It is difficult to have definite theoretical support; and through protocol analysis, it can be seen that the P2P streaming media system is not suitable for this method, because most of the current P2P streaming media applications use UDP to complete node information interaction and data transmission; In addition, more and more applications use TCP and UDP at the same time, resulting in a high misidentification rate of this method, and it is easy to misidentify some commonly used applications

Images