TCP message reassembling method and TCP message reassembling device

A technology of message and message length, which is applied in the field of network communication and can solve problems such as inability to reassemble TCP streams

Active Publication Date: 2016-09-14
HANGZHOU DPTECH TECH
View PDF5 Cites 16 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The present invention provides a TCP message reassembly method and device to s

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • TCP message reassembling method and TCP message reassembling device
  • TCP message reassembling method and TCP message reassembling device
  • TCP message reassembling method and TCP message reassembling device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0019] In order to enable those skilled in the art to better understand the technical solutions provided by the embodiments of the present invention, some nouns, concepts or terms involved in this document will first be described below.

[0020] It should be noted that, in the embodiment of the present invention, when comparing the sequence numbers of the packets, it refers to the sequence numbers of the packets in the same direction (TCP request direction or TCP response direction) for comparison.

[0021] Types of TCP packets: including but not limited to sequential packets, out-of-order packets, retransmission packets, and overlapping packets;

[0022] Sequential message: a TCP message whose sequence number is equal to the sequence number of the TCP message received in sequence;

[0023] Out-of-sequence message: a TCP message with a sequence number greater than the sequence number of the TCP message received in sequence;

[0024] Retransmission message: the sum of the sequ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a TCP message reassembling method and a TCP message reassembling device, wherein the method comprises the following steps of: when a TCP message is received, inquiring a corresponding conversation table item according to an IP address and a port contained in the TCP message; according to a direction of the TCP message, a serial number of the TCP message and a serial number of the TCP message orderly received in the direction, determining type of the TCP message; if the TCP message is a disordered message, adding the TCP message in a disordered message link list of the direction; if the TCP message is an ordered message, judging whether a link list node matched with the TCP message exists in the disordered message link list of the direction; if so, adding the link list node and the TCP message into an ordered message link list of the direction; and otherwise, adding the TCP message into the ordered message link list of the direction. By application of the embodiment of the invention, reassembling of TCP streams can be realized.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a TCP message reassembly method and device. Background technique [0002] Application-oriented network devices of the modern information audit type need to perform many seven-layer business processes, such as attack detection, traffic audit, access control, and so on. To process layer-7 services, it is necessary to conduct in-depth inspection of the traffic load to ensure the sequential processing of the traffic. The current attack deformation method includes dividing the TCP (Transmission Control Protocol, Transmission Control Protocol) message into a single-byte IP (Internet Protocol, Internet Protocol) message, and then sending it to have a higher probability of causing TCP disorder. ; Or the attacker directly uses a specific tool to send out-of-order packets. When a network device receives out-of-order packets, if it cannot reassemble the TCP stream, it cannot...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L12/953H04L12/883H04L47/43H04L49/9015
CPCH04L49/9015H04L49/9057
Inventor 曾金民
Owner HANGZHOU DPTECH TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap