TCP (transmission control protocol) flow convergence method and system based on IPV 6 (internet protocol version 6)

Abstract

The invention discloses a TCP flow convergence method and system based on an IPV 6. Three types of data packages are analyzed according to TCP decoding and include a three-way handshaking data package established by TCP connection, a three-way handshaking data package closed by the TCP connection, and a TCP data package carrying application protocol data. The legality of the TCP connection is ensured through validity determination of the connection of the three-way handshaking data package established by TCP connection; the processing for the three-way handshaking data package closed by the TCP connection and the TCP data package carrying the application protocol data is performed through the establishment of TCP flow information; and the TCP flow convergence system based on the IPV 6 is further provided, and comprises a capture module, a separation module, an analysis module, a determined connection module, an establishment module, a first search processing module and a second search processing module.

Description

technical field [0001] The invention relates to computer network data processing, in particular to an IPV6-based TCP flow convergence method and system. Background technique [0002] With the popularization and rapid development of the Internet, the existing network bandwidth often reaches Gigabit, or even 10 Gigabit. The expansion of network bandwidth improves the user experience of using the network, and also reduces the length of network connection time. In practical applications, the amount of data transmitted is not large, so there are a large number of connections with a short transmission time. In IPv6, the expansion of the address domain space brings about a sharp increase in the address range of the four-tuple of the flow. [0003] Due to the maturity of network threats and network attacks, network security devices often cannot judge whether there is a threat or whether it is an attack only by the data carried by a single data packet. Current network security devi...

AI Technical Summary

Problems solved by technology

If the existing security equipment uses a single flow aggregation mechanism to deal with the current network situation, it seems a bit powerless. Therefore, how to efficiently solve network attacks and network threats has become an urgent problem to be solved.

Images