Path quality analysis method of encrypted network based on flow analysis

Abstract

The invention discloses a path quality analysis method of the encrypted network based on flow analysis. The method comprises that A) a random intermediate node in the communication process of the encrypted network is selected as a measurement point, and the network flow is collected; B) an encrypted data packet received by the measurement point is analyzed to obtain source and target addresses of an IP header and an SPI of an IPsec header, and the source and target addresses of the IP header and the SPI of the IPsec header determine a session; and C) all data packets of the same session are analyzed, the packet loss number is calculated according to serial number information in the IPsec protocol headers of the data packets, and the packet loss index of the whole link is calculated finally. The method can obtain quality information of encrypted IPsec communication paths by analyzing the encrypted IPsec data packets.

Description

technical field [0001] The invention relates to the technical field of network path quality analysis methods, more precisely, an encrypted network path quality analysis method based on traffic analysis in the case of encrypted network traffic. Background technique [0002] At present, the domestic network coverage is continuously expanding, and the average speed of the network is also continuously increasing. For users, it means that the service quality of the network is good. In most cases, the network has indeed improved, but this does not mean that the user's online experience has improved, because it is possible to encounter network congestion, resulting in indirect abnormal network performance for users. To quickly detect faults caused by factors such as network lines and congestion, after years of research, the following measurement techniques can be used to achieve: [0003] (1) Active measurement. Parameters such as network status and performance are obtained by a...

AI Technical Summary

Problems solved by technology

Therefore, the quality of the network path cannot be obtained by analyzing the TCP protocol header and payload in the IP data packet; (2) In an encrypted network, in order to improve security, hosts in the network often prohibit various active measurement data packets, such as the ping command generated ICMP

[0007] Therefore, there is no good solution for the end-to-end path quality detection of encrypted networks.

Images