Application protocol analysis method based on DPI (Distributed Protocol Interface)
A technology of application protocol and analysis method, applied in the field of in-depth analysis of DPI seven-layer application protocol, can solve problems such as network instability and affect work efficiency, and achieve the effect of improving analysis efficiency and accuracy
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0021] Embodiment 1: Application protocols are generally filled in data packets with fixed data, or are characterized by fixed ports, fixed ip, etc. The present invention uses a DPI-based seven-layer application protocol depth analysis method to perform various Acquisition of application software data packets, and analysis to obtain feature strings for feature collection, and efficient DPI deep packet inspection technology with multi-pattern matching algorithms for protocol matching. see figure 1 , adding the application protocol analysis layer in the Tcp / ip protocol stack to achieve the interception and analysis of the data packet; in the tcp / ip protocol stack, the complete ip data message is obtained after the default processing of the data packet is completed, and it is judged whether the application protocol layer module is If it exists, it will enter its analysis layer to analyze and process the data packet. If it does not exist, it will be sent directly without affecting...
Embodiment 2
[0022] Embodiment two: see figure 1 , figure 2 , the present embodiment is based on the DPI-based seven-layer application protocol depth analysis method, and the specific scheme is realized by the following steps:
[0023] 1) Add the application protocol analysis layer in the tcp / ip protocol stack. After the complete ip data message arrives in the protocol stack, the system itself performs default processing, and then transfers to the application protocol analysis layer to analyze the application protocol, and outputs the corresponding Apply the protocol information, and finally send the message; the application protocol analysis layer is added to the protocol stack in the form of a virtual function, and this function module is implemented separately to increase its independence.
[0024] 2) In-depth packet protocol analysis is based on data packet feature matching, analyzes the protocol features used by various application software, and records them as a specific format fea...
Embodiment 3
[0030] Embodiment three: see figure 1 , figure 2 , the deep analysis method based on the DPI seven-layer application protocol of the present embodiment adopts a packet capture tool to obtain various application software data packets, and then determines which type or which application software the acquired application software belongs to by the following steps,
[0031] 1) Add application protocol analysis layer in tcp / ip protocol stack;
[0032] 2) Establish an application protocol matching model with a multi-pattern matching algorithm through a deep packet analysis algorithm;
[0033]3) Obtain the network data packet and analyze the characteristic application of the data packet, obtain the application protocol information of the network data packet, and then use the application protocol matching model with a multi-pattern matching algorithm to perform protocol matching to determine which type or which protocol type belongs to. An application software.
PUM
Abstract
Description
Claims
Application Information
- R&D Engineer
- R&D Manager
- IP Professional
- Industry Leading Data Capabilities
- Powerful AI technology
- Patent DNA Extraction
Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.
© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com