P2P Protocol Identification And Inspection Based On Netflow Under Tilera Multicore Environment

With the high-speed development of Internet, P2P (Peer-to-Peer) as a new networktechnology has become a high bandwidth Internet application, which continued to devour thelimited network bandwidth resources, reduced the network bandwidth utilization, and effectedthe development of other application. How to take an effective management of P2Papplication has become a current topic research area.The technology of P2P protocol identification must have a fully understanding about P2Ptechnology, most of the early P2P applications use fixed port to communication, a newgeneration of P2P application has been gradually using dynamic random port, even using theencryption technology to communication. For different P2P applications have differentrecognition methods, including the methods of fixed port detection,the flow characteristicsand deep packet inspection. But these three kinds of methods have certain limitations, whichcan not accurate and efficient recognition the P2P application protocol, so it is a fixedlocation-based keyword matching based on the deep packet inspection in this paper, whichcan achieve better results in performance and accuracy.The contents of this paper as follow:(1)Understanding the methods of P2P protocolidentification and analyzes the characters of the applications;(2)Implemention the NetFlowprobe based on the platform of Tilera multicore processors and doing some optimization work,bypassing the TCP/IP protocol stack and processing the packets in user space to get a highperformance;(3)Realizing the fixed position of keyword matching P2P protocol identification,the matching result was packaged into the packet of NetFlow V5and send it to NetFlowcollector;(4)In order to parse the NetFlow V5packets which include the P2P information, it’snecessary to do a functional expansion about NetFlow collector. We can conclusion that thisstduy is good in practicability through some tests, laid the fundation for the parallel algorithmin multicore processor and the realization the technology of NetFlow support deep packetinspection to P2P protocol identification.