Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Deep packet inspection method and device

A deep message detection and message technology, applied in the field of data communication, can solve the problems of reducing the speed of feature word search and message forwarding, difficult to detect nested services, affecting software performance, etc., so as to improve the detection speed. Hit rate, reduce false hits, and combine simple effects

Inactive Publication Date: 2009-11-18
ZTE CORP
View PDF1 Cites 13 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The current deep packet detection methods are relatively simple based on the combination of one or more feature words, which is difficult to detect nested services
[0006] In the existing technology, in order to be able to detect real services, complex signature combinations are usually configured for detection, which will greatly affect the performance of the software, such as reducing the speed of signature search and message forwarding, etc. There will be packet loss in the case of
And if there are multiple nested businesses, it will be even harder to detect

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Deep packet inspection method and device
  • Deep packet inspection method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0019] The processing steps of the method of the present invention are as follows:

[0020] The first step is to analyze the bearer business application (such as HTTP, etc.), determine the service characteristics and the characteristic words that can identify the bearer business application, etc.;

[0021] The second step is to analyze nested business applications and determine the characteristic words that can identify business applications at each level, which can be configured in combination with multiple keywords during the search process at each level;

[0022] The third step, for the identification of nested services, combine the feature identification methods of each level to determine the final progressive search scheme for service identification (that is, first detect the basic bearer service type, and then deeply analyze the real service type layer by layer );

[0023] The fourth step is to configure the progressive search relationship through the command line. For ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to the field of data communication, in particular to a deep packet inspection method and a device. A feature character configuration file is operated in a server for configuring a file to identify the type of a packet. The method comprises the following steps: the server firstly carries out inspection of bearer type service feature characters on the packet according to the feature character configuration file, if the inspection result confirms the bearer type service, the inspection of nested type service feature characters is further carried out on the packet according to the settings of the feature character configuration file. The method and the device respectively carry out bearer type and nested type service inspection on the packet by configuring progressive search relationship, thereby improving the inspection hit rate. Furthermore, the combination of the feature characters is simple, the modification is easy and the expansion is convenient.

Description

technical field [0001] The invention relates to the field of data communication, in particular to a deep message detection method and device for improving the hit rate of message detection in a business identification and control system. Background technique [0002] With the rapid development of Internet technology, more and more content is carried on the network, and network service providers provide customers with more and more service content, and these services can be divided into different applications. This requires network devices to provide more complex packet processing capabilities, distinguish different applications, and provide different levels of bandwidth for different applications. [0003] In the past, network devices used packet header information below layer 4 to distinguish unused applications. Commonly used layer 2 MAC addresses and quintuples were used. However, as network applications become more and more abundant, different applications cannot be com...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L63/0245H04L63/1416
Inventor 方新球
Owner ZTE CORP
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products