Method and device for detecting protocol agent

A protocol and detection technology, applied in the field of communication, can solve the problems of false negatives and false positives, low detection efficiency of proxy protocols, etc., and achieve the effect of high efficiency and accurate detection results.

Active Publication Date: 2011-10-19
BEIJING XINWANG RUIJIE NETWORK TECH CO LTD
View PDF4 Cites 10 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0042] The main purpose of the present invention is to provide a protocol proxy detection method and device to solve the problems in the prior art that the detection efficiency of the proxy protocol is low and false positives will be missed.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for detecting protocol agent
  • Method and device for detecting protocol agent
  • Method and device for detecting protocol agent

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0072] Figure 5 Provided a preferred structural block diagram of a protocol agent detection device, see Figure 5 , the device includes: a first receiving unit 501, a first detecting unit 502, a second receiving unit 503, a first judging unit 504, a first saving unit 505, a second judging unit 506 and a second detecting unit 507 connected in sequence, in:

[0073] The first receiving unit 501 receives a message in response to the handshake information when the TCP connection is established;

[0074] The first detection unit 502 judges whether the TCP connection is initiated by the detection end or the client according to the message in response to the handshake information;

[0075] The second receiving unit 503 receives the request information sent by the client when the message in response to the handshake information is initiated by the client;

[0076] The first judging unit 504 judges whether the request information is proxy request information;

[0077] When the req...

Embodiment 2

[0104] Figure 7 A preferred flowchart of the protocol agent detection method is shown, see Figure 7 , the method includes:

[0105] S701. When the TCP connection is established, receive a message in response to the handshake information;

[0106] S702. Determine whether the TCP connection is initiated by the detection end or the client according to the message in response to the handshake information;

[0107] S703, if the message in response to the handshake information is initiated by the client, receive the request information sent by the client;

[0108] S704, judging whether the request information is agent request information;

[0109] S705. If the request information is proxy request information, save the destination server information requested by the client;

[0110] S706, judging whether the detection terminal establishes a connection with the saved destination server requesting access;

[0111] S707, if the detection end establishes a connection with the save...

Embodiment 3

[0134] This embodiment provides a specific example of the protocol agent detection method, in this embodiment, Figure 9 Another schematic diagram of the protocol proxy detection method is shown, by Figure 9It can be seen that the protocol agent detection device includes: a driver packet receiving module and an application layer message processing module connected in sequence.

[0135] Among them, the driver receiving module performs the function through the following steps:

[0136] S901, driving the receiving module to receive a TCP message;

[0137] S902, judging whether the TCP message is the second message of the three-way handshake, that is, the message syn_ack in response to the handshake information, if so, generating a table entry with the four elements of the TCP connection of the message and inserting it into the TCP filter table, And send the message to the application layer message processing module. If not, it means that the message may be an end message, may...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a method and device for detecting a protocol agent. The method is characterized by comprising the following steps of: when a TCP (Transmission Control Protocol) connection is established, receiving a message for responding to handshake information; according to the message for responding to the handshake information, judging that the TCP connection is initiated by a detection terminal or a client terminal; if the message for responding to the handshake information is initiated by the client terminal, receiving request information sent by the client terminal; judging whether the request information is agent request information; if the request information is the agent request information, storing the information of a destination server requested to be accessed by the client terminal; judging whether a connection is established between the detection terminal and the stored destination server requesting for accessing; and, if the connection is established between the detection terminal and the stored destination server requesting for accessing, detecting that the protocol agent is used. According to the invention, the problems of low efficiency whether the agentprotocol detection is adopted and failure and false alarms can be resolved, and therefore, the effects of high efficiency whether the protocol agent is adopted and accurate detection result can be achieved.

Description

technical field [0001] The invention relates to the communication field, in particular to a protocol agent detection method and device. Background technique [0002] IP (Internet Protocol, protocol for interconnection between networks) address: IP address is the address of each computer marked in the TCP / IP (Transmission Control Protocol / Internet Protocol, Transmission Control Protocol / Internet Internet Protocol) communication protocol, in TCP / IP In the IP protocol, each networked computer relies on an IP address to identify itself and uses the IP address to exchange information. [0003] TCP (Transmission Control Protocol, Transmission Control Protocol) transmission protocol: TCP is a connection-oriented transport layer protocol in the TCP / IP system, which provides full-duplex and reliable delivery services. The unique identification of four elements of a TCP connection is: source IP, destination IP, source port and destination port. [0004] Protocol agent: protocol agen...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/26H04L29/08H04L29/06
Inventor 温寅丰
Owner BEIJING XINWANG RUIJIE NETWORK TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap