Network access detection system and network access detection method

Abstract

The invention provides a network access detection system which comprises a data packet acquisition module, a message extraction module, a field extraction processing module and a host quantity determining module. The data packet acquisition module acquires data packets in a network; the message extraction module extracts HTTP (hypertext transport protocol) messages in the data packets; the field extraction module extracts and records values of user agent fields in the HTTP protocol messages; the host quantity determining module is used for comparing the record values of the user agent fields and determining quantity of hosts required to access to the network according to the comparison results. Correspondingly, the invention provides a network access detection method. By the network access detection system and the network access detection method, whether users are in sharing internet through multiple computers or not can be detected, sharing access detection precision can be improved effectively, detection evasion of some hosts by technical means such as breaking IPID (interface point identifier) contract rules and orders or dispersing the IPID is avoided, and further failure in detection of sharing access is avoided.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a network access detection system and a network access detection method. Background technique [0002] At present, the billing of the Internet broadband access service mainly adopts the method of billing by duration instead of billing by traffic. Some people take advantage of this loophole of the operator, often apply for broadband in the name of the individual and let enterprises or black Internet cafes use it, or several households share broadband to share the cost, which has caused a huge loss of revenue for the operator. Due to the historical reasons of the IP protocol design itself, no standard or protocol can directly reflect how many computers are shared in the LAN under the same IP address. Currently, the detection methods commonly used in the industry are as follows: [0003] There is an IPID identifier in the IP message, and the identifier of each machine cycles f...

AI Technical Summary

Problems solved by technology

[0010] Therefore, a new technical solution is needed, which can effectively improve the accuracy of shared access detection, and at the same time prevent certain hosts from evading detection by disrupting the IPID packet sending rules and order or dispersing IPID technical means, resulting in no shared access detection. access situation

Images