NAT (Network Address Translation) identification method based on network traffic characteristics

An identification method and technology of network traffic, applied in the network field, can solve the problems of relying on IP data packets, difficulties in normal network operation of operators, restrictions on users' Internet habits, etc., and achieve the effect of broad market prospects.

Inactive Publication Date: 2016-08-24
合肥酷睿网络科技有限公司
View PDF0 Cites 8 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, NAT technology also provides convenience for unauthorized users to illegally access the network, and brings many difficulties to the normal network operation of operators
The common problem of the various existing NAT identification methods is th

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Examples

Experimental program
Comparison scheme
Effect test

Example Embodiment

[0023] A NAT identification method based on network traffic characteristics, including the following steps:

[0024] (1) Data collection

[0025] Data collection is realized through Win Dump packet capture tool software, routers, PCs and L2 switch port mirroring. The collected data includes PC traffic and internal host traffic behind the NAT device. During the data collection process, Ensure that the network environment of the PC host and the NAT device host are consistent;

[0026] (2) Data preprocessing

[0027] First, the collected data needs to be extracted in the form of five-tuples. In the process of stream extraction, the TCP stream and UDP stream will be processed differently. At the same time, the data in the

[0028] The NAT device and the ordinary host are marked separately for subsequent data mining. The five-tuples are respectively the source IP address, the destination IP address, the source port number, the destination port number, and the transport layer protocol type; ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses an NAT (Network Address Translation) identification method based on network traffic characteristics. The method comprises the following steps of: acquiring the network traffic characteristics of all IP (Internet Protocol) addresses in a network; taking each IP address as an example in data mining and taking characteristic parameters as attributes in the data mining; and dividing the IP addresses into two types including NAT equipment and a common host through the data mining, so as to finish the identification of NAT. The method does not depend on any special field in a data packet, does not depend on an operation habit of an operating system and a user and has wide market prospect.

Description

Technical field [0001] The present invention belongs to the field of network methods. More specifically, the present invention relates to a NAT identification method based on network traffic characteristics. Background technique [0002] NAT technology greatly reduces the problem of IP address space exhaustion, realizes the function of private network access to public network, and brings great convenience and benefits to users. However, NAT technology also provides convenience for unauthorized users to illegally access the network, and brings many difficulties to the normal network operation of operators. The common problem of various existing NAT identification methods is that they generally rely on a particular field in the IP data packet, and the quality of their identification depends entirely on this field. Once the field is modified, or it cannot meet the identification requirements, these methods will be fully effective. And these methods are either restricted by the ope...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06
CPCH04L63/0236H04L63/1408H04L63/1466
Inventor 董雄飞
Owner 合肥酷睿网络科技有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products