Method for distinguishing RTP/RTCP flow capacity

Abstract

The invention relates to a method for recognizing RTP / RTCP flux, based on the protocol character and correlation operation, wherein said method comprises: A, recognizing the RTP / RTCP stream generated by RTSP control; B, recognizing the RTP / RTCP stream generated by non-RTSP data pack. For RTCP pack, the invention can only analyze the port information and one byte at fixed position of load that the second byte, to obtain the result, with low consumption; for RTP pack, only recognizing based on the IP and the port number and the maintained RTCP stream information; since the number of RTCP and RTP streams are only relative to the parallel RTP / RTCP conversation number of chain, but not relative to the band width capacity of chain, it has low consumption, and better expanding property. And it uses Hash list to reduce the consumptions on search, refresh and delete of RTP / RTCP stream; and it has low error report rate and leakage rate, since the application clients use random port.

Description

technical field [0001] The invention relates to the technical field of computer network traffic monitoring and performance analysis, in particular to a method for identifying RTP / RTCP traffic based on protocol features and associated behavior processes. Background technique [0002] Application layer traffic identification is one of the important prerequisites for analyzing the traffic composition, distribution, and changing rules of various application layer services carried by the network, understanding service performance, locating network bottlenecks, and ensuring QoS for key services. [0003] With the advancement of technology and the increase of Internet bandwidth, multimedia applications on the network are becoming more and more common, and people's dependence on the network is becoming more and more serious. The standard does not specify which protocol is used, but most VoIP applications based on SIP and H.323 currently use RTP / RTCP to transmit multimedia informatio...

AI Technical Summary

Problems solved by technology

[0005] However, due to the relatively wide application of VoIP in recent years, there are relatively few studies on VoIP traffic identification, and most of the existing related application layer traffic identification methods focus on coarse-grained traffic classification and theoretical analysis. Due to the characteristics of the RTP / RTCP stream itself, these theoretical identification / classification methods still have problems at different levels in terms of the accuracy, scalability, timeliness, and especially practicality of RTP / RTCP identification.

[0006] For example, the RTP / RTCP flow generated by RTSP flow control does not use a fixed port number, but is controlled by the RTSP flow. At the same time, the characteristics of the content of the RTP / RTCP flow are not easy to be found; therefore, if QoS is provided for specific VoIP services Ensure that the existing coarse-grained classification methods cannot meet the requirements of fine-grained business differentiation, etc.

[0007] In addition, because in the VoIP conversation system, the RTP / RTCP flow does not exist from the beginning to the end. Generally speaking, it is because the RTSP flow or other protocol flows are specified in its static load. If the traditional port identification method is used, Unable to effectively judge the start and end of RTP / RTCP sessions

Images