A peer-to-peer network traffic detection method and system thereof

Abstract

The invention discloses a method and a system for detecting a flow of a peer-to-peer network. The method comprises the following steps of: acquiring all the packets by a primary filter plant from a network forwarding device; detecting a plaintext feature string of a known P2P application after the primary filter is performed, sending a packet which contains a plaintext feature string to a plaintext processing model and counting a flow of the P2P forwarded in a plaintext manner; sending the packets which contain no plaintext feature string to a to-be-detected processing module and sending an active detecting packet formed by secret key information defined by different P2P applications to a detected target; detecting the flow of the P2P forwarded in a cipher text manner or other unknown flows according to a response packet fed back by the detected target. By implementing the technical scheme of the invention, processing work for flow detection is reduced effectively, the system efficiency is improved, and the failure and update of a single module do not influence the whole system. The technique of the invention avoids influencing the topology and performance of the traditional network and facilitates deployment and implementation.

Description

technical field [0001] The invention relates to the technical field of computer network traffic management, in particular to a method and system for detecting peer-to-peer network application traffic in computer network traffic. Background technique [0002] In recent years, various peer-to-peer (Peer-to-Peer, P2P) applications in computer networks have become more and more abundant, and many new application types and protocols have emerged. These P2P applications consume a large amount of network bandwidth, reducing the service quality of traditional Internet applications such as Web and Email, and the content transmitted by P2P applications also involves issues such as copyright, viruses and obscene content. Therefore, in order to effectively utilize network resources, protect intellectual property rights, and suppress the spread of viruses and obscene content, it is necessary to effectively manage the traffic of P2P applications, and first of all, it must be able to reali...

AI Technical Summary

Problems solved by technology

Since this kind of aspect requires statistical analysis of a large number of data packets before making a judgment, the amount of data to be processed is large, and the implementation of machine learning is complicated, so efficient and real-time detection cannot be achieved

Moreover, the detection basis of this type of method is the traffic characteristics of P2P applications, which is a statistical quantity and cannot accurately distinguish various specific P2P application traffic.

Images