The Design And Implement Of DPI Monitor System

With the growing of network applications and the increases of network information, the traditional firewall which based on the detection of IP header packet can not meet the needs of information security. Now more and more network security equipments need to identify the packet load, the contents of network packets for analysis and monitoring of network information. Related technologies discussed in this paper were all about deep packet inspection of network data packet content inspection.It was hot that Monitoring Internet content in security field.The identification method based on deep packet inspection,was comparing content with the rules.Matching was successful while rules hit. The author participated in a network intrusion detection system based on rules matching.The author build a general model of the monitoring system,participated in and compled the implementation some section of the WEB console and did well with packet preprocessing which after data packet capture, decoded.Packet preprocessing consists of two parts:the IP fragment reassembly and TCP stream to restore the group packages-according to the policy of the IP fragment reassembly and TCP state maintenance and streaming restore.The project we relyed on,has passed the test and acceptance by customer.The test of intrusion detection, virus detection, application identification, URL filtering and other aspects was good, showing that the system is running well. The sub-module in the function and performance that I completed met the customer needs.