Method and apparatus for identifying network data traffic type

Abstract

The embodiment of the invention relates to the technical field of communications, and particularly relates to a method and an apparatus for identifying a network data traffic type, which are used for determining a traffic type of a to-be-tested server. The method comprises the steps of obtaining M to-be-identified data stream sets of a to-be-tested server, comparing the M to-be-identified data stream sets with reference sample data stream sets, finding out R to-be-identified data stream sets matched with the reference sample data stream sets from the M to-be-identified data stream sets, and finding out T reference sample data stream sets matched with the to-be-identified data stream sets from N reference sample data stream sets; and according to the number of all data streams in the R to-be-identified data stream sets, the number of all data streams in the T reference sample data stream sets, the number of all data streams in the M to-be-identified data stream sets, the number of all data streams in the N reference sample data stream sets, and a traffic type corresponding to the reference server, identifying the traffic type of the to-be-tested server, thereby accurately identifying the network data traffic type of the to-be-tested server.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of communications, and in particular, to a method and device for identifying network data traffic types. Background technique [0002] With the increasing scale of the Internet, the number of servers providing various network services for users on the Internet is also increasing, and various new protocols and service types are also emerging one after another. Network data traffic from different servers often has different behaviors and characteristics. Feature identification, comparison and classification of network data traffic can be targeted to adopt the best processing method for different types of network traffic. For example, prioritize processing of high-priority network traffic, suspend processing of low-priority network traffic, and shield intrusion traffic, etc., thereby improving the service quality of network servers and improving the experience of Internet users. [0...

AI Technical Summary

Problems solved by technology

Another type of solution is to analyze the specific content of the payload in the message, such as using specific keywords or regular expressions for matching, etc.; although the accuracy of this type of solution is higher than that of using port numbers to classify, but The processing of payload data often consumes more resources, and encrypted traffic cannot be processed using this method

It can be seen that in the prior art, the network data traffic type of the server to be tested cannot be effectively identified according to the destination port number and the specific content of the payload in the analysis message.

Images