Research And Application Of High-Performance Network Application Protocol Identification Technology

With the rapid development of information technology, especially the Internet technology, the number of network applications is rapidly growing. The development of network applications has brought great convenience to people’s lives. But the complexity and diversity of network applications also take huge challenges to the network application management and traffic control. In order to cope with the challenges brought about by the rapid development of network applications effectively, research on network application identification has become one of the important areas of research in network management.According to the characteristics of the network applications which use HTTP protocol, on the basis of analyzes the characteristics of a large number of network application protocols, this paper proposed a content features matching mode that combined the single packet matching mode and multi-packet match mode. According to the problem that a part of the network applications not have explicit features, on the basis of analyzes the characteristics of a large number of network application protocols, this thesis analyze a variety of flow characteristics of P2P streaming media, proposed a network application identification method based on behavior characteristics, designed and implemented a network application protocol identification system based on improved method. Finally, this thesis made a comprehensive evaluation on the network application protocol identification system. Compared to the L7-Filter module in the Linux firewall, this thesis proved that the system has advantages in the identification of P2P streaming media application. The main work of this thesis are as follows:1) Research on the current main protocol identify technology, analyzed the shortcomings and improvement direction of the existing methods in the network application identification scenarios.2) According to the characteristics of the network applications which use HTTP protocol, this paper proposed a content features matching mode that combined the single packet matching mode and multi-packet match mode.3) Analyzed the data flow characteristics of common P2P streaming media, proposed a network application identification method based on behavior characteristics, and given the behavior characteristics of common P2P streaming media.4) Designed and implemented a network application protocol identification system based on the improved method, given the detailed design and key code of the main module in the system, made a evaluation on the system.5) Make a comprehensive evaluation to network application protocol identification system, verify the accuracy of the system and proved that the system has advantages in the identification of P2P streaming media application.