Method and device for identifying peer-to-peer (P2P) shared flows
A peer-to-peer node and traffic identification technology, applied in the network field, can solve the problems of high configuration requirements of the detection system, inability to obtain data packet strings, inability to detect encrypted data packet content, etc., to achieve the effect of improving accuracy and efficiency
Inactive Publication Date: 2011-08-10
BEIJING HUAWEI DIGITAL TECH
View PDF4 Cites 18 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0004] In the process of implementing the present invention, the inventor found that since each data packet in the P2P shared flow needs to be detected for a character string, the detection time of the P2P shared flow is increased, and the configuration requirements for the detection system are relatively high; in addition , if the data encryption technology is used to encrypt the data packets in the P2P sharing traffic, the content in the encrypted data packets cannot be detected according to the P2P protocol, so that the strings in the data packets cannot be obtained, resulting in the failure of P2P sharing traffic detection
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment approach
[0162] As described above, the peer nodes share the traffic identification device, in another implementation manner, the extraction module 802 includes:
[0163] The third unit is used to extract the IP address and port number of the node providing the shared service in the flow when the flow is a TCP synchronization message;
[0164] Correspondingly, the preset connection feature library includes the IP address and port number of the node providing shared services, the service type provided by the service port, and the IP address and port number of the client node connected to the IP address and port number of the node providing shared services. number and the latest timestamp.
[0165] As described above, the peer nodes share the traffic identification device, the first identification module 804 further includes:
[0166] The adding unit is configured to add the connection identifier of the traffic as a new record to the preset connection feature database before identifying...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The embodiment of the invention relates to a method and device for identifying peer-to-peer (P2P) shared flows. The method comprises the following steps: acquiring quintuple information of data messages, and searching a data stream table in accordance with the quintuple information; if the quintuple information does not exist in the data stream table, taking the data messages as unidentified flows and extracting the connection identifications of the flows; querying the connection identifications of the flows in a preset connection feature library; when the flows are user datagram protocol (UDP) flows, if the connection identifications of the flows are queried in the connection feature library, judging whether the types of the connection identifications of the flows are determined; if the types of the connection identifications of the flows are not determined or the connection identifications of the flows are not queried in the connection feature library, identifying the flows by deep packet inspection (DPI); when the flows are transmission control protocol (TCP) flows, if the connection identifications of the flows are queried in the connection feature library, judging whether thetypes of the connection identifications of the flows are determined; if the types of the connection identifications of the flows are not determined, judging whether the timestamps of the flows exceedthe time limit; and if the timestamps of the flows exceed the time limit, determining the flows to be the P2P shared flows.
Description
technical field [0001] Embodiments of the present invention relate to the field of network technologies, and in particular, to a method and apparatus for identifying traffic shared by peer nodes. Background technique [0002] In recent years, peer-to-peer (P2P) technology has gradually penetrated into many fields such as information sharing, real-time communication, online games, financial services, information retrieval, collaborative work, pervasive computing and network storage. Therefore, it is increasingly concerned and favored by the computer industry. However, with the wide application of P2P services in the current network, P2P users have seized a large amount of network bandwidth, even as high as 60% to 80% of the bandwidth, and only the remaining bandwidth is reserved for other users, which makes the internal business of the enterprise unable to run normally. A large amount of network bandwidth is preempted by P2P users, which also makes non-P2P users unable to ob...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/08H04L12/56H04L12/801
Inventor 夏忠其马塞尔·瓦德佛格詹翀陈洪飞龚钧
Owner BEIJING HUAWEI DIGITAL TECH