Content Classification via Packet Analysis on Multi-Protocol Ports
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems are limited in determining the content type of data transmitted through non-type specific ports and struggle to classify IM and P2P data, as they rely on port numbers which restrict data transmission to a single type and cannot accurately classify data transmitted through multiple ports or without specific port associations.
Innovation Solution
A method and system that receive and analyze packets to determine the content type by examining packet characteristics, such as size, port numbers, and protocol patterns, across multiple packets within a session to accurately classify data, allowing for classification even when data is transmitted through ports that can handle multiple types of content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If port number is used to determine content type, then classification is simple and fast, but a port can transmit only one type of data and IM/P2P data cannot be classified
Solution Approach 1:
The system changes from using only port number as a classification parameter to using multiple parameters including packet size, protocol type, and port number. This allows the system to classify data transmitted through non-type specific ports by analyzing additional packet characteristics, thereby resolving the contradiction between simple fast classification and port flexibility.
2Ease of operation
If port number is used to determine content type, then classification is straightforward, but data transmitted through non-type specific ports cannot be classified
Solution Approach 1:
The classification process is segmented into multiple stages: first checking port number for quick classification, then analyzing packet size and protocol type for non-type specific ports. This segmented approach maintains simplicity for common cases while improving accuracy for edge cases without significantly increasing overall complexity.
3Adaptability or versatility
If multiple data types are allowed on a single port, then port versatility improves, but existing systems cannot determine content type
Solution Approach 1:
The system introduces an intermediary classification mechanism that analyzes packet characteristics (size, protocol type) as intermediate indicators to determine content type when port number alone is insufficient. This intermediary analysis layer preserves port multi-functionality while preventing loss of content type identification capability.
Data Source
AI summary
A method for determining a type of content includes receiving a first packet, determining a state of classification for the first packet or for a session with which the first packet is associated, receiving a second packet, and determining a content type for the second packet based at least in part on the determined state. A method for determining a type of content includes receiving a packet associated with a session, determining whether a content type has been determined for the session or for an other packet associated with the session, and classifying the packet to be the content type based at least in part on a result from the act of determining. A method for determining a type of content includes receiving a first packet from a first port, the first port adapted for receiving at least two types of content, and determining a content type for the first packet or for a session with which the first packet is associated. A method for determining a type of content includes receiving a packet associated with a session, and determining a state of classification for the packet or the session.