Network traffic restoration method and device and computer readable storage medium

Abstract

The embodiment of the invention discloses a network traffic restoration method and device and a readable storage medium. The method comprises the following steps: obtaining a target data packet in network traffic; traversing the target data packet, and searching target feature information; under the condition that the target feature information is found, determining a protocol type of the target data packet application layer according to the target feature information and a preset corresponding relation table; determining position information of the target data packet for storing file contentaccording to the protocol type; and restoring the file content in the target data packet based on the position information. According to the embodiment of the invention, only the traversal of the target data packet is carried out, and compared with the analysis of a multi-layer protocol, the efficiency is greatly improved, the possibility of blockage is reduced, and the probability of file loss isgreatly reduced.

Description

technical field [0001] The present invention relates to the technical field of network technology, in particular to a network traffic restoration method, device and computer-readable storage medium. Background technique [0002] With the vigorous development of enterprise informatization, a large number of files are transmitted on the network, and there are more and more business systems in enterprises, and it is impossible to conduct unified monitoring at the entrance and exit of each system. The security protection of enterprise information documents is faced with facing increasingly severe challenges. In order to prevent the leakage of sensitive files, a unified monitoring system is urgently needed. However, because the monitored file transmission will generate network traffic, if the files can be restored at the exit of the company network for monitoring, it can effectively prevent files from being leaked. leaked. However, the traffic at the network egress is huge, so ...

AI Technical Summary

Problems solved by technology

[0004] The current method needs to analyze each layer of the protocol clearly before extracting the file. However, analyzing the protocol is a time-consuming operation. When the network traffic is huge, the file cannot be restored in time. Once blocked, subsequent data packets will be generated and cannot continue to be analyzed. , resulting in file loss, unable to restore all files

Images