Application protocol analysis method based on DPI (Distributed Protocol Interface)

A technology of application protocol and analysis method, which is applied in the field of in-depth analysis of DPI seven-layer application protocol, can solve problems such as network instability and affecting work efficiency, and achieve the effect of improving analysis efficiency and accuracy

Inactive Publication Date: 2012-02-08
深圳西默万网科技技术有限公司
View PDF4 Cites 20 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0002] With the development of computer networks, network applications are also increasing, and all application protocols are also constantly developing. Entertainment, work, leisure, etc. through the network have occupied most of the time in life, and in order to avoid downloading The application of entertainment data streams causes instability to the network, thereby affecting work efficiency

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Application protocol analysis method based on DPI (Distributed Protocol Interface)
  • Application protocol analysis method based on DPI (Distributed Protocol Interface)
  • Application protocol analysis method based on DPI (Distributed Protocol Interface)

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0021] Embodiment 1: Application protocols are generally filled in data packets with fixed data, or are characterized by fixed ports, fixed ip, etc. The present invention uses a DPI-based seven-layer application protocol depth analysis method to perform various Acquisition of application software data packets, and analysis to obtain feature strings for feature collection, and efficient DPI deep packet inspection technology with multi-pattern matching algorithms for protocol matching. see figure 1 , adding the application protocol analysis layer in the Tcp / ip protocol stack to achieve the interception and analysis of the data packet; in the tcp / ip protocol stack, the complete ip data message is obtained after the default processing of the data packet is completed, and it is judged whether the application protocol layer module is If it exists, it will enter its analysis layer to analyze and process the data packet. If it does not exist, it will be sent directly without affecting...

Embodiment 2

[0022] Embodiment two: see figure 1 , figure 2 , the present embodiment is based on the DPI-based seven-layer application protocol depth analysis method, and the specific scheme is realized by the following steps:

[0023] 1) Add the application protocol analysis layer in the tcp / ip protocol stack. After the complete ip data message arrives in the protocol stack, the system itself performs default processing, and then transfers to the application protocol analysis layer to analyze the application protocol, and outputs the corresponding Apply the protocol information, and finally send the message; the application protocol analysis layer is added to the protocol stack in the form of a virtual function, and this function module is implemented separately to increase its independence.

[0024] 2) In-depth packet protocol analysis is based on data packet feature matching, analyzes the protocol features used by various application software, and records them as a specific format fea...

Embodiment 3

[0030] Embodiment three: see figure 1 , figure 2 , the deep analysis method based on the DPI seven-layer application protocol of the present embodiment adopts a packet capture tool to obtain various application software data packets, and then determines which type or which application software the acquired application software belongs to by the following steps,

[0031] 1) Add application protocol analysis layer in tcp / ip protocol stack;

[0032] 2) Establish an application protocol matching model with a multi-pattern matching algorithm through a deep packet analysis algorithm;

[0033]3) Obtain the network data packet and analyze the characteristic application of the data packet, obtain the application protocol information of the network data packet, and then use the application protocol matching model with a multi-pattern matching algorithm to perform protocol matching to determine which type or which protocol type belongs to. An application software.

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a network application protocol analysis method, in particular to a seven-layer application protocol depth analysis method based on a DPI. The method comprises the following steps of: obtaining various application software data packets by using a packet capturing tool; determining which kind or which one obtained application software belongs to through the following steps: (1) adding an application protocol analysis layer into a tcp/ip protocol stack, (2) establishing an application protocol matching model by using a depth packet analysis arithmetic, and (3) obtaining a network data packet and analyzing characteristic application of the data packet to obtain application protocol information of the network data packet; carrying out protocol matching through the application protocol matching model with a multi-mode matching arithmetic; and determining which kind or which one the protocol type belongs to. According to the application protocol analysis method based on the DPI disclosed by the invention, various application software data packets are obtained by using the packet capturing tool; the protocol matching is carried out by using a high-efficient DPI depth packet detection technology with the multi-mode matching arithmetic; the rapid application protocol analysis is carried out on the data packets; and the analysis efficiency and accuracy are increased.

Description

technical field [0001] The invention relates to a network application protocol analysis method, in particular to a DPI seven-layer application protocol depth analysis method. Background technique [0002] With the development of computer networks, network applications are also increasing, and all application protocols are also constantly developing. Entertainment, work, leisure, etc. through the network have occupied most of the time in life, and in order to avoid downloading The application of entertainment data streams causes instability to the network, thereby affecting work efficiency. In this case, if there is an analysis method for quickly analyzing the application protocol, the application protocol analysis can be performed on the data packets, and then the network can be detected and controlled according to the results of these analysis, which is very important for stabilizing the network and improving the network. is very helpful. However, how to achieve fast anal...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
Inventor 张水华
Owner 深圳西默万网科技技术有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap