Method and device for identifying peer-to-peer (P2P) shared flows
A peer-to-peer node and traffic identification technology, applied in the network field, can solve problems such as high configuration requirements for the detection system, inability to obtain data packet strings, and increase the time for P2P shared traffic detection, so as to achieve the effect of improving efficiency and accuracy
Inactive Publication Date: 2013-08-28
BEIJING HUAWEI DIGITAL TECH
View PDF4 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0004] In the process of implementing the present invention, the inventor found that since each data packet in the P2P shared flow needs to be detected for a character string, the detection time of the P2P shared flow is increased, and the configuration requirements for the detection system are relatively high; in addition , if the data encryption technology is used to encrypt the data packets in the P2P sharing traffic, the content in the encrypted data packets cannot be detected according to the P2P protocol, so that the strings in the data packets cannot be obtained, resulting in the failure of P2P sharing traffic detection
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment approach
[0163] The third unit is used to extract the IP address and port number of the shared service node in the flow when the flow is a TCP synchronous message;
[0164] Correspondingly, the preset connection feature library includes the IP address and port number of the node providing the shared service, the service type provided by the service port, and the IP address and port number of the client node connected to the IP address and port number of the node providing the shared service. number and latest timestamp.
[0165] As described above in the device for identifying peer-to-peer shared traffic, the first identification module 804 further includes:
[0166] The adding unit is configured to add the connection identifier of the flow as a new record to the preset connection feature library before using the deep packet inspection (DPI) technology to identify the flow.
[0167] Figure 10 A schematic diagram of the third structure of the P2P shared traffic identification device ...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The embodiment of the invention relates to a method and device for identifying peer-to-peer (P2P) shared flows. The method comprises the following steps: acquiring quintuple information of data messages, and searching a data stream table in accordance with the quintuple information; if the quintuple information does not exist in the data stream table, taking the data messages as unidentified flows and extracting the connection identifications of the flows; querying the connection identifications of the flows in a preset connection feature library; when the flows are user datagram protocol (UDP) flows, if the connection identifications of the flows are queried in the connection feature library, judging whether the types of the connection identifications of the flows are determined; if the types of the connection identifications of the flows are not determined or the connection identifications of the flows are not queried in the connection feature library, identifying the flows by deep packet inspection (DPI); when the flows are transmission control protocol (TCP) flows, if the connection identifications of the flows are queried in the connection feature library, judging whether thetypes of the connection identifications of the flows are determined; if the types of the connection identifications of the flows are not determined, judging whether the timestamps of the flows exceedthe time limit; and if the timestamps of the flows exceed the time limit, determining the flows to be the P2P shared flows.
Description
technical field [0001] The embodiment of the present invention relates to the field of network technologies, in particular to a method and device for identifying peer-to-peer shared traffic. Background technique [0002] In recent years, peer-to-peer (Peer to Peer, referred to as: P2P) technology has gradually penetrated into many fields such as information sharing, real-time communication, online games, financial services, information retrieval, collaborative work, popular computing and network storage. Therefore, it has been increasingly concerned and favored by the computer industry. However, with the widespread application of P2P services in the current network, P2P users seize a large amount of network bandwidth, even up to 60% to 80% of the bandwidth, and only reserve the remaining bandwidth for other users, resulting in the failure of the business within the enterprise. A large amount of network bandwidth is seized by P2P users and non-P2P users cannot obtain due net...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/08H04L12/70H04L12/801
Inventor 夏忠其马塞尔·瓦德佛格詹翀陈洪飞龚钧
Owner BEIJING HUAWEI DIGITAL TECH