CN101321097A - Tencent network living broadcast business recognition method based on payload depth detection - Google Patents
Tencent network living broadcast business recognition method based on payload depth detection Download PDFInfo
- Publication number
- CN101321097A CN101321097A CNA200810123883XA CN200810123883A CN101321097A CN 101321097 A CN101321097 A CN 101321097A CN A200810123883X A CNA200810123883X A CN A200810123883XA CN 200810123883 A CN200810123883 A CN 200810123883A CN 101321097 A CN101321097 A CN 101321097A
- Authority
- CN
- China
- Prior art keywords
- live
- live broadcast
- broadcast service
- hash table
- signaling
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The Tencent live broadcast service identifying method based on payload deep inspection is composed of Tencent live broadcast signaling identifying method and Tencent live broadcast media stream identifying method, including the steps of: firstly, identifying the Tencent live broadcast signaling by a Tencent live broadcast signaling identifying engine; then parsing all Tencent live broadcast media streams according to a Tencent live broadcast media stream identifying engine. In the process, a terminal related technology, payload characteristic analysis and a protocol analysis are used for associated analysis, which ensures accuracy and identifying success rate of the system. The method has great expandability and accuracy, which is easy to joint with application interfaces related to the carriers.
Description
Technical field
The present invention is a kind of research that is used for equity networking (P2P) software Tencent network living broadcast method for recognizing flux of current popular, how main research detects effectively identification Tencent network living broadcast business based on the DPI pay load deep, and the model of cognition and the method for Tencent network living broadcast business have been designed, belong to the technical field of network new business flow identification, relate to the protocal analysis field.
Background technology
Along with the research of P2P network technology and the appearance of various P2P softwares, and the continuous growth of P2P traffic carrying capacity, the P2P Network is used for traditional Internet and has been brought huge impact, especially the characteristics of the bandwidth-hogging of P2P network schemer own have been brought huge challenge to network resource management.Germany the Internet survey institute ipoque claims, P2P has thoroughly ruled current the Internet, wherein the total flow of 50-90% has had a strong impact on the operation of some regular traffic all from the P2P program, simultaneously the waste that has brought bandwidth resources to operator and network management personnel and some enterprise.Therefore, along with the P2P development of internet technology, a big focus of the research of existing P2P network communication mechanism and the present network research of P2P flow identification having become.
Based on the P2P technology, QQ is live to be the live software of a new network, video quality height, smoothness, and programme content is abundant.The rather small and exquisite exquisiteness of the live software of QQ is a the Internet that is used for, the software that carries out extensive net cast, and the not enough 700K of independent installation kit, system resource takies low.Tengxun has adopted high efficiency audio, the video compression algorithm of independent development in this software, make narrow-band user also can enjoy the live service of QQ.
In order can accurately to discern, must fully understand the live communication protocol that adopts of QQ to the QQ live broadcast service.But because the live agreement of QQ is underground agreement, and transmission course adopted reliable cryptographic algorithm, and is perfect inadequately to live agreement of QQ and Communications Mechanism at present, thereby can not carry out accurate recognition to the QQ live broadcast service.
In the prior art, having only the simple research to general QQ agreement, mainly is that the key technology of QQ instant message and QQ speech business is studied.The shortcoming of prior art is:
1) research of the live signaling information of shortage QQ.Existing research to the QQ agreement only is the research at general QQ service protocol, comprises instant message and QQ voice and video business, and is less to the research of the live signaling of QQ.
2) research of the live medium stream information of shortage QQ.Just simply described the live employing of QQ P2P mechanism in the existing research and utilized udp protocol to carry out media data to transmit, not to the concrete research of medium stream information.
3) the payload statistical nature is simple.Realizing the live flow identification of QQ though have in the existing research by the live payload characteristic of QQ is studied, only is the feature that has obtained first byte of payload 0xFE, is not enough to realize the accurate identification to the live flow of QQ.
Summary of the invention
Technical problem: the objective of the invention is to set up a kind of Tencent network living broadcast business recognition method that detects based on pay load deep, and design its model of cognition and method, by identification to the QQ live broadcast service, signaling flow and Media Stream that QQ is live distinguish from the QQ live data, be convenient to analyzing communication both sides' signalling interactive process and media information, thereby realize accurate identification and control the live flow of QQ.
Technical scheme: the present invention proposes a kind of technological frame of effective identification QQ live broadcast service, and detailed design recognition methods.System is divided into four levels, is successively from the bottom up: data collection layer, protocal analysis layer, flow identification (professional perception) layer and QQ live broadcast service application layer and presentation layer.
The Tencent network living broadcast business recognition method that the present invention is based on the pay load deep detection is:
Step 1. initialization Hash table: this Hash table is IP address and the domain name that is used to store the fixing visit of QQ live broadcast service signaling flow; An IP address is corresponding to a domain name, and from the efficient of storing and searching, optimum with the Hash table storage, elements all in the Hash table are initialized as 0, i.e. the IP address of the fixing visit of all QQ live broadcast service signaling flows, and domain name is initialized as 0,
Step 2. is given the Hash table assignment: the IP address and the domain name of the fixing visit of the QQ live broadcast service signaling flow that counts by test analysis are write Hash table,
Step 3. receives grouping,
Step 4. is at first mated with Hash table according to the form of IP datagram, if the coupling would change step 6; As it fails to match, then carry out the live signaling coupling of QQ, change step 5,
Step 5. pair packet carries out the live signaling degree of depth coupling of QQ, if coupling is then changeed step 6, otherwise abandoned grouping, changes step 3,
Step 6. is preserved the live signaling flow packet of this QQ, changes step 3,
Step 7. receives grouping: this receiving course is that same packet copies is used for the different grouping characteristic matching afterwards with being same process in the live signaling identification of QQ,
Step 8. is carried out DPI according to QQ live broadcast service Media Stream payload characteristic and is detected, by protocol type, and port range, payload length is mated; If the match is successful, then change step 9; Otherwise, abandon grouping, change step 7.，
Step 9. judges that this IP bag is a QQ live broadcast service Media Stream, preserves this QQ live broadcast service Media Stream, changes step 7, finishes.
Beneficial effect: the identification by to live signaling flow of QQ and Media Stream can solve following problem:
(1) concerning radio and television operator, can carry out statistical analysis to the QQ live broadcast service, be convenient to control the live influence of QQ to the traditional tv business;
(2) can make operator that the QQ live broadcast service is implemented optimum supervision, as formulate rational charging policy to ensure the interests of traditional tv business;
(3) consider from the angle of national information safety, can be to the live enforcement real-time listening of QQ, effectively prevent unlawful activities by QQ as communication medium.
Description of drawings
Fig. 1 is QQ live broadcast service signaling flow identification process figure.Provided each processing procedure of the live signaling flow of identification QQ among the figure.
Fig. 2 is QQ live broadcast service Media Stream identification process figure.Provided each processing procedure of QQ live broadcast service Media Stream recognition methods among the figure.
Fig. 3 is a QQ live broadcast service identification holistic approach flow chart.Provided the whole identification process that the QQ live broadcast service comprises signaling and Media Stream among the figure.
Embodiment
Key method of the present invention is at the flow identification layer, and this layer mainly comprises two live signaling flow recognition methodss of method: QQ and the live Media Stream recognition methods of QQ.At first identify QQ live broadcast service signaling data, further parse the live Media Stream of QQ again, referring to accompanying drawing 3 by Media Stream identification engine by signaling identification engine.By test and data analysis, the live acquiescence of QQ mainly adopts the UDP communication modes, and it is TCP443 that port is landed in password authentification, when TCP 443 ports are obstructed, does not then land server.Live television programming is generally given tacit consent to use, and UDP 13000---14000 scope ports, port are unfixed (illustrate: TCP 443 ports are well known port).
The live signaling flow identification of QQ engine is formulated according to particular server Hash coupling, and particular server domain name and IP address table see attached list 1.
The live Media Stream identification of QQ engine strategy:
1) carry out in the process of transfer of data in client and QQ direct broadcast server, the UDP message bag payload characteristic that client sends is: with 0,x44 72 63 6F C0 A8 A8 A8 36 ... beginning.Wherein the 5th of payload the is the server address of client online to Eight characters joint.
2) carry out in the process of transfer of data in client and QQ direct broadcast server, the UDP message bag payload characteristic that client is received is: a kind of with 0xFE 29 04 04 29 1F C6 ... beginning, and the packet payload length is 1068 bytes.Another is with 0xFE 5A 00 00 5A 02 09 ... beginning.Based on above feature, we are as long as judge first byte of the payload of UDP message bag, and whether third and fourth joint satisfies above condition, just can make accurately and judging.
Below introduce each aspect and the QQ living broadcast business recognition method of this design in detail.
1. data collection layer
Function: this aspect provides for the data acquisition of different links or reproduction technology, as the collection or the reproduction technology of 100/1000M FE, ATM, SDH different rates, to ensure data integrity, to be sent to last layer face---protocal analysis layer reliably.
Interface: the interface of this aspect and last layer face is a bitstream data, provides various grouping informations to the upper strata.
2. protocal analysis layer
Function: this aspect provides the protocol analysis for the TCP/IP data, purpose is for enough IP packet header and the header information of TCP/UDP and the packet payload information of necessity thereof is provided to the upper strata, to satisfy identification and the perception of last layer surface current amount identification layer to business.
Interface: the protocal analysis degree of depth of this aspect should be analyzed to the 4th layer of the ICP/IP protocol stack, i.e. transport layer.It is stream (flow) to the interface that the upper strata provides.Stream should be determined by a five-tuple, i.e. flow=(source IP, purpose IP, source port, destination interface, protocol type).Protocol type herein refers to TCP or UDP.If necessary, but storage part payload also in this stream, and the payload size of catching is configurable.
3. flow is discerned (professional perception) layer
Function: this aspect is the core aspect of whole framework, and main is that features such as the header information of the IP packet header that provides of protocal analysis layer and TCP/UDP and payload information thereof effectively identify the QQ live broadcast service according to lower floor is provided, and the grouping that it fails to match then abandons.
Interface: the interface that provides to application should be a five-tuple, and promptly (source IP, purpose IP, source port, destination interface is used details).
This layer mainly comprises two methods: signaling recognition methods of QQ live broadcast service and the recognition methods of QQ live broadcast service Media Stream.By at first identifying the live signaling information of QQ, come to determine the live Media Stream of real QQ again.
◆ the recognition methods of QQ live broadcast service signaling.Method processing procedure such as accompanying drawing 1.
(1) initialization Hash table.This Hash table is IP address and the domain name that is used to store the fixing visit of QQ live broadcast service signaling flow.Because an IP address is corresponding to a domain name, therefore the efficient from storing and searching is optimum with the Hash table storage.Elements all in the Hash table are initialized as 0.The IP address of the i.e. fixing visit of all QQ live broadcast service signaling flows, domain name is initialized as 0.
(2) give the Hash table assignment.The IP address and the domain name of the fixing visit of the QQ live broadcast service signaling flow that counts by test analysis are write Hash table.
(3) receive grouping.
(4) according to the form of IP datagram, at first mate, if mate then commentaries on classics (6) with Hash table; As it fails to match, then carry out the live signaling coupling of QQ, change (5).
(5) packet is carried out the live signaling degree of depth coupling of QQ,, change (3) if coupling is then changeed (6), otherwise abandoned grouping.
(6) preserve the live signaling flow packet of this QQ.Change (3).
◆ the recognition methods of QQ live broadcast service Media Stream.Method flow as shown in Figure 2.
(1) receives grouping.This receiving course is that same packet copies is used for the different grouping characteristic matching afterwards with being same process in the live signaling identification of QQ.
(2) carry out DPI according to QQ live broadcast service Media Stream payload characteristic and detect, by protocol type, port range, payload length is mated.If the match is successful, then change (3); Otherwise, abandon grouping, change (1).
(3) judge that this IP bag is a QQ live broadcast service Media Stream, preserve this QQ live broadcast service Media Stream.Change (1).
4.QQ live broadcast service application layer and presentation layer
Identification for the QQ live broadcast service has very wide significance and using value.Mainly can be applied in:
◆ the traffic statistics of QQ live broadcast service are analyzed;
◆ the performance evaluation of QQ live broadcast service;
◆ the live flow control of QQ;
◆ the estimation of QQ rate weighing factor:
◆ the live flow abnormality detection of QQ;
◆ the security monitoring of QQ live information.
Concrete grammar is:
Step 1. initialization Hash table: this Hash table is IP address and the domain name that is used to store the fixing visit of QQ live broadcast service signaling flow; An IP address is corresponding to a domain name, and from the efficient of storing and searching, optimum with the Hash table storage, elements all in the Hash table are initialized as 0, i.e. the IP address of the fixing visit of all QQ live broadcast service signaling flows, and domain name is initialized as 0,
Step 2. is given the Hash table assignment: the IP address and the domain name of the fixing visit of the QQ live broadcast service signaling flow that counts by test analysis are write Hash table,
Step 3. receives grouping,
Step 4. is at first mated with Hash table according to the form of IP datagram, if the coupling would change step 6; As it fails to match, then carry out the live signaling coupling of QQ, change step 5,
Step 5. pair packet carries out the live signaling degree of depth coupling of QQ, if coupling is then changeed step 6, otherwise abandoned grouping, changes step 3,
Step 6. is preserved the live signaling flow packet of this QQ, changes step 3,
Step 7. receives grouping: this receiving course is that same packet copies is used for the different grouping characteristic matching afterwards with being same process in the live signaling identification of QQ,
Step 8. is carried out DPI according to QQ live broadcast service Media Stream payload characteristic and is detected, by protocol type, and port range, payload length is mated; If the match is successful, then change step 9; Otherwise, abandon grouping, change step 7.，
Step 9. judges that this IP bag is a QQ live broadcast service Media Stream, preserves this QQ live broadcast service Media Stream, changes step 7, finishes.
The backbone Internet service detection system of developing according to this method has obtained concrete checking on the provincial backbone network of 10G.System adopts the beam split mode that the 10G flow load balance is branched on some the traffic identification processors, and the traffic identification processor is finished the realization of core algorithm, extracts, analyzes, identifies QQ live broadcast service signaling and medium stream information from the grouping of numerous and complicated.
By actual motion and on-the-spot test at provincial 10G backbone network, can accurately and intactly identify the signaling and the medium stream information of QQ live broadcast service, well embodied the implementation result of this method, verified the accuracy of method.
The live supervisory control system of QQ is divided into entities such as light-dividing device, monitor terminal, core database server and application server.The 10G flow is divided toward some monitoring terminal equipments by light-dividing device, and the flow of every monitoring terminal equipment carrying gigabit identifies after traffic signaling and the Media Stream, business information is sent to core database in real time, and is issued by application server.
System's access way is divided into two kinds: a kind of for series model, and be about to supervisory control system and connect and implement to detect and control in the backbone network; Another kind is a paralleling model, promptly adopts the mode of beam split to finish detection and control.Series model can influence whole network topology, and can bring hidden danger for legacy network, and the paralleling model of therefore more recommending legacy network is had no effect inserts.
After the real-time beam split from the 10G link of the light-dividing device of system is got off, it is divided into the several flow points to some watch-dogs, watch-dog adopts high performance flow collection technology to receive all flows, and call signaling and Media Stream identification engine automatically flow is carried out real-time identification, and control according to user-defined strategy, as shutoff, interference or clearance etc.
It below is QQ live broadcast service signaling flow identification Hash matching list.The domain name and the IP address thereof of the fixing visit of QQ live broadcast service signaling flow have been provided in the table.
| Domain name | The IP address |
| adslivemsg.qq.com | 218.2.135.1 |
| adslivemsg-cdn.qq.com | 121.14.74.208 |
| qqlivehabit-cdn.qq.com | 58.60.11.140 |
| groupclient.qq.com | 58.60.10.170 |
| jpgcacheh.tv.qq.tel.chinacache.net | 58.218.205.27 |
| qqliveloginxy.qq.com | 222.28.155.37 |
| qqlivelogindx.qq.com | 121.14.75.115. |
| qqloginwt.qq.com | 121.14.75.115 |
| adslivemsg-cdn.qq.com | 121.14.74.208 |
| rs2.qq.com | 58.251.62.56 |
| hubstat.sandai.net | 58.61.39.208 |
| tc.wscache.z.cdn20.com | 61.129.13.148 |
| rsl.qq.com | 219.133.60.243 |
| t0101.sandai.net | 219.129.83.2 |
| qqliveaction.tv.qq.com | 218.30.73.58 |
| t0208.sandai.net | 61.183.55.218 |
| qqlivead-cdn.qq.com | 218.85.138.153 |
| researchnetlive.qq.com | 202.102.56.3 |
| tvlogindx.qq.com | 221.236.11.40 |
| researchnetGame.qq.com | 202.102.56.3 |
| mvhub5pr.co.sandai.net | 58.61.39.218 |
| qring-tms.qq.com | 58.61.166.87 |
| qqliveguid.qq.com | 58.60.9.22 |
| hub4u.sandai.net | 58.61.39.213 |
Claims (1)
1. Tencent network living broadcast business recognition method that detects based on pay load deep is characterized in that steps of the method are:
Step 1. initialization Hash table: this Hash table is IP address and the domain name that is used to store the fixing visit of QQ live broadcast service signaling flow; An IP address is corresponding to a domain name, and from the efficient of storing and searching, optimum with the Hash table storage, elements all in the Hash table are initialized as 0, i.e. the IP address of the fixing visit of all QQ live broadcast service signaling flows, and domain name is initialized as 0,
Step 2. is given the Hash table assignment: the IP address and the domain name of the fixing visit of the QQ live broadcast service signaling flow that counts by test analysis are write Hash table,
Step 3. receives grouping,
Step 4. is at first mated with Hash table according to the form of IP datagram, if the coupling would change step 6; As it fails to match, then carry out the live signaling coupling of QQ, change step 5,
Step 5. pair packet carries out the live signaling degree of depth coupling of QQ, if coupling is then changeed step 6, otherwise abandoned grouping, changes step 3,
Step 6. is preserved the live signaling flow packet of this QQ, changes step 3,
Step 7. receives grouping: this receiving course is that same packet copies is used for the different grouping characteristic matching afterwards with being same process in the live signaling identification of QQ,
Step 8. is carried out DPI according to QQ live broadcast service Media Stream payload characteristic and is detected, by protocol type, and port range, payload length is mated; If the match is successful, then change step 9; Otherwise, abandon grouping, change step 7.，
Step 9. judges that this IP bag is a QQ live broadcast service Media Stream, preserves this QQ live broadcast service Media Stream, changes step 7, finishes.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA200810123883XA CN101321097A (en) | 2008-05-27 | 2008-05-27 | Tencent network living broadcast business recognition method based on payload depth detection |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA200810123883XA CN101321097A (en) | 2008-05-27 | 2008-05-27 | Tencent network living broadcast business recognition method based on payload depth detection |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101321097A true CN101321097A (en) | 2008-12-10 |
Family
ID=40180943
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNA200810123883XA Pending CN101321097A (en) | 2008-05-27 | 2008-05-27 | Tencent network living broadcast business recognition method based on payload depth detection |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101321097A (en) |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102255771A (en) * | 2011-06-12 | 2011-11-23 | 中山爱科数字科技有限公司 | Device for identifying interregional integrated service |
| CN102624878A (en) * | 2012-02-23 | 2012-08-01 | 汉柏科技有限公司 | Method and system for identifying P2P (peer-to-peer) protocol on basis of DNS (domain name server) protocol |
| CN103259699A (en) * | 2013-05-28 | 2013-08-21 | 华为技术有限公司 | Test method, test system, client-side and server-side |
| CN104660727A (en) * | 2015-02-10 | 2015-05-27 | 深圳市博瑞得科技有限公司 | Service identification method based on DNS (Domain Name Server) and system of method |
| CN107787003A (en) * | 2016-08-24 | 2018-03-09 | 中兴通讯股份有限公司 | A kind of method and apparatus of flow detection |
| CN110636374A (en) * | 2018-06-22 | 2019-12-31 | 北京京东尚科信息技术有限公司 | Method and device for searching information |
| CN112804556A (en) * | 2021-04-08 | 2021-05-14 | 广州无界互动网络科技有限公司 | PC-end-oriented live broadcast data processing method, device and system |
-
2008
- 2008-05-27 CN CNA200810123883XA patent/CN101321097A/en active Pending
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102255771A (en) * | 2011-06-12 | 2011-11-23 | 中山爱科数字科技有限公司 | Device for identifying interregional integrated service |
| CN102624878A (en) * | 2012-02-23 | 2012-08-01 | 汉柏科技有限公司 | Method and system for identifying P2P (peer-to-peer) protocol on basis of DNS (domain name server) protocol |
| WO2013123798A1 (en) * | 2012-02-23 | 2013-08-29 | 汉柏科技有限公司 | Dns protocol-based method and system for identifying p2p protocol |
| CN102624878B (en) * | 2012-02-23 | 2014-06-18 | 汉柏科技有限公司 | Method and system for identifying P2P (peer-to-peer) protocol on basis of DNS (domain name server) protocol |
| CN103259699A (en) * | 2013-05-28 | 2013-08-21 | 华为技术有限公司 | Test method, test system, client-side and server-side |
| CN103259699B (en) * | 2013-05-28 | 2015-11-25 | 华为技术有限公司 | Method of testing, system and client and service end |
| CN104660727A (en) * | 2015-02-10 | 2015-05-27 | 深圳市博瑞得科技有限公司 | Service identification method based on DNS (Domain Name Server) and system of method |
| CN107787003A (en) * | 2016-08-24 | 2018-03-09 | 中兴通讯股份有限公司 | A kind of method and apparatus of flow detection |
| CN110636374A (en) * | 2018-06-22 | 2019-12-31 | 北京京东尚科信息技术有限公司 | Method and device for searching information |
| CN112804556A (en) * | 2021-04-08 | 2021-05-14 | 广州无界互动网络科技有限公司 | PC-end-oriented live broadcast data processing method, device and system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102315974B (en) | Stratification characteristic analysis-based method and apparatus thereof for on-line identification for TCP, UDP flows | |
| CN102045363B (en) | Establishment, identification control method and device for network flow characteristic identification rule | |
| CN101321097A (en) | Tencent network living broadcast business recognition method based on payload depth detection | |
| CN101645806B (en) | Network flow classifying system and network flow classifying method combining DPI and DFI | |
| CN101714952B (en) | Method and device for identifying traffic of access network | |
| CN102307123B (en) | NAT (Network Address Translation) flow identification method based on transmission layer flow characteristic | |
| CN107733851A (en) | DNS tunnels Trojan detecting method based on communication behavior analysis | |
| CN103139315A (en) | Application layer protocol analysis method suitable for home gateway | |
| CN107623754B (en) | WiFi acquisition system and method based on authenticity MAC identification | |
| CN105681389B (en) | A kind of recognition methods and device based on Skype different function communication stream | |
| CN106789242A (en) | A kind of identification application intellectual analysis engine based on mobile phone client software behavioral characteristics storehouse | |
| CN105847250B (en) | VoIP flow media various dimensions information steganography real-time detection method | |
| CN109151880A (en) | Mobile application flow identification method based on multilayer classifier | |
| CN110247819B (en) | Wi-Fi video acquisition equipment detection method and system based on encrypted stream identification | |
| CN102571946A (en) | Realization method of protocol identification and control system based on P2P (peer-to-peer network) | |
| CN112532614A (en) | Safety monitoring method and system for power grid terminal | |
| CN106789728A (en) | A kind of voip traffic real-time identification method based on NetFPGA | |
| CN101072174A (en) | Tencent voice identifying method based on pay load deep detection and session correlating technology | |
| CN109450733A (en) | A kind of network-termination device recognition methods and system based on machine learning | |
| CN100493065C (en) | Method for using immediate information software by data detection network address switching equipment | |
| CN102271331B (en) | Method and system for detecting reliability of service provider (SP) site | |
| CN108023882A (en) | A kind of synergistic data leakage prevention method and system | |
| CN113382039B (en) | Application identification method and system based on 5G mobile network flow analysis | |
| CN101924769A (en) | Payload characteristic identification based method for identifying Sohu dragon oath game service | |
| CN101854366B (en) | Peer-to-peer network flow-rate identification method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Open date: 20081210 |