NAT (Network Address Translation) identification method based on network traffic characteristics

Abstract

The invention discloses an NAT (Network Address Translation) identification method based on network traffic characteristics. The method comprises the following steps of: acquiring the network traffic characteristics of all IP (Internet Protocol) addresses in a network; taking each IP address as an example in data mining and taking characteristic parameters as attributes in the data mining; and dividing the IP addresses into two types including NAT equipment and a common host through the data mining, so as to finish the identification of NAT. The method does not depend on any special field in a data packet, does not depend on an operation habit of an operating system and a user and has wide market prospect.

Description

Technical field [0001] The present invention belongs to the field of network methods. More specifically, the present invention relates to a NAT identification method based on network traffic characteristics. Background technique [0002] NAT technology greatly reduces the problem of IP address space exhaustion, realizes the function of private network access to public network, and brings great convenience and benefits to users. However, NAT technology also provides convenience for unauthorized users to illegally access the network, and brings many difficulties to the normal network operation of operators. The common problem of various existing NAT identification methods is that they generally rely on a particular field in the IP data packet, and the quality of their identification depends entirely on this field. Once the field is modified, or it cannot meet the identification requirements, these methods will be fully effective. And these methods are either restricted by the ope...

AI Technical Summary

Problems solved by technology

However, NAT technology also provides convenience for unauthorized users to illegally access the network, and brings many difficulties to the normal network operation of operators

The common problem of the various existing NAT identification methods is that they all generally rely on a certain special field in the IP packet, and the quality of the identification depends entirely on this field.

Moreover, these methods are either restricted by the operating system, or restricted by the user's surfing habits.