CN101605018A - A kind of decoding depth message detection protocol method, equipment and system based on stream - Google Patents
A kind of decoding depth message detection protocol method, equipment and system based on stream Download PDFInfo
- Publication number
- CN101605018A CN101605018A CN 200910108357 CN200910108357A CN101605018A CN 101605018 A CN101605018 A CN 101605018A CN 200910108357 CN200910108357 CN 200910108357 CN 200910108357 A CN200910108357 A CN 200910108357A CN 101605018 A CN101605018 A CN 101605018A
- Authority
- CN
- China
- Prior art keywords
- data
- stream
- protocol
- decoding
- data flow
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/18—Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a kind of decoding depth message detection protocol method based on stream, described method comprises: receive business data flow, different data flow is distributed in the different threads handles; The protocol type of the described data flow in identification shunting back is distributed to the same depth message with same data flow and detects processing module; Deep message detects processing module and calls the regular expression rule base, and described data are carried out protocol-decoding.In addition, the present invention also provides a kind of equipment and system based on the decoding depth message detection protocol that flows.The present invention has improved decoding speed, satisfies the real-time decoding requirement, and has reduced the demand to server memory, has reduced cost.
Description
Technical field
The present invention relates to field of mobile communication, relate in particular to a kind of decoding depth message detection protocol method, equipment and system based on stream.
Background technology
Dramatic change has taken place for people's communication mode in mobile communication business, and the data in mobile phone business has begun to substitute gradually traditional speech business.On the one hand, along with the mobile service fast development, new professional constantly introducing, various new application emerge in an endless stream, brought more facility for people's life and work, but then, the mobile service development time also makes data network class of business and flow rapid growth, causes that mobile data services are carried out the protocol-decoding performance demands is more and more higher.
The protocol-decoding technology generally is the pure software decoding at present, because user service data mostly is the text formatting coding, its business datum amount is big, the data service agreement is more, and generally business datum is split in a plurality of packets, obtain this business datum and need carry out string searching, so processing speed is slower, be difficult to satisfy the real-time decoding requirement; In addition, since in the data transmission procedure data flow be split in a plurality of packets (being that what is called is striden bag) more thus need software group bag, but need to preserve simultaneously a plurality of packets in the data flow in the group packet procedures, its internal memory that takies is bigger, the generic server that needs is more, so its cost is also higher.
Summary of the invention
Technical problem to be solved by this invention is slow and cost is high based on the protocol-decoding method decoding speed of stream in the mobile communication, has proposed a kind of decode quick, lower-cost protocol-decoding method, equipment and system based on stream.
In order to solve the problems of the technologies described above, the invention provides a kind of decoding depth message detection protocol method based on stream, comprising:
Receive business data flow, different data flow is distributed in the different threads handles;
The protocol type of the described data flow in identification shunting back is distributed to the same depth message with same data flow and detects processing module;
Deep message detects processing module and calls the regular expression rule base, and described data are carried out protocol-decoding.
Further, in said method, described deep message detects processing module and calls the regular expression rule base, described data is carried out protocol-decoding comprise:
After described deep message detection processing module is obtained the protocol type of described data, find and described data protocol type corresponding protocols decoding rule according to the regular expression rule base;
The packet that comprises described data is scanned, from described packet, extract the output information of described data according to described protocol-decoding rule;
From described packet, extract the decoded information of described data according to described output information.
Further, in said method, comprise before the described reception business data flow: deep message detects the regular expression rule base after processing module is carried out initialization and loaded compiling.
Further, in said method, described method also comprises described regular expression rule base is compiled, and converts thereof into deep message and detects the data that processing module can be discerned form.
Further, in said method, described different data flow is distributed in the different threads to handle comprise: analyze the stream information that extracts user in the data, and according to described user's stream information described data be distributed in the different threads and handle.
Further, in said method, described method specifically comprises:
For tcp data stream,, it is assigned in the different threads according to source IP address, purpose IP address, source port, destination interface and the protocol type of tcp data stream;
For UDP message stream, it is assigned in the different threads according to source IP address, source port, traffic ID, the protocol type of UDP message stream.
Further, in said method, the protocol type of the described data flow in described identification shunting back is distributed to same depth message detection processing module with same data flow and comprises:
The protocol type that passes through the data flow of shunting is discerned, obtained the protocol type of data in the described data flow;
The protocol type that requires according to reality is judged data in the described data flow, and whether needs are decoded, if do not need then directly to abandon described data, if need, then same data flow are distributed to the same depth message and detect processing module.
Further, in said method, describedly same data flow is distributed to the same depth message detects processing module and comprise:
When receiving new data flow, set up new stream table;
When receiving data message, in described stream table, search earlier its corresponding stream number, if can find, judge again whether described data message is last bag, if not, then described data message is included in the corresponding data flow, otherwise the deletion of flowing;
When described data flow occurs out of order or repeating transmission and described data flow when normally not deleted, start timer and in timing, described data flow is deleted.
A kind of decoding depth message detection protocol equipment based on stream, described equipment comprise that data reception module, data distribution module, protocol type identification module, flow management module and deep message detect processing module, wherein:
Described data reception module is used to receive mobile service data;
Described data distribution module is connected in described data reception module, is used for that different data flow is distributed to different threads and handles;
Described protocol type identification module is connected in described data distribution module, is used for each thread the protocol type of the data of process shunting is discerned;
Described flow management module is connected in described protocol type identification module, is used for each thread same data flow is distributed to same depth message detection processing module;
Deep message detects processing module, is connected in described flow management module, is used to call the regular expression rule base to carrying out protocol-decoding through the data of flow management module.
A kind of decoding depth message detection protocol system based on stream, described system comprises routing device and decoding depth message detection protocol equipment, wherein:
Described routing device is used for the transmission network communication data and simultaneously the data of being transmitted is duplicated portion issuing described decoding depth message detection protocol equipment;
Described decoding depth message detection protocol equipment, be used to receive the business datum that described routing device sends, different data flow is distributed in the different threads handles, protocol type to described data is discerned, to be distributed to the same depth message through the same data flow after the protocol type identification and detect processing module, and call the regular expression rule base described data are carried out protocol-decoding.
The present invention engages by deep message detection hardware technology and regular expression rule base, and adopt multithreading that the user service data of complexity is carried out the hardware decoding, improved decoding speed greatly, satisfy the real-time decoding requirement, and reduced demand to server memory, reduced cost.
Description of drawings
Fig. 1 is the structural representation that the present invention is based on the decoding depth message detection protocol equipment of stream;
Fig. 2 is the structural representation that the present invention is based on the decoding depth message detection protocol system of stream;
Fig. 3 is the schematic flow sheet that the present invention is based on the decoding depth message detection protocol method of stream.
Embodiment
The present invention is described further below in conjunction with drawings and the specific embodiments.
In an embodiment of the present invention, consider DPI (Deep Packet Inspection, the deep message detection) hardware has characteristics fast and accurately when data are carried out protocol-decoding, has adopted the networking mode that the DPI checkout equipment is parallel to router or switch.Wherein, the DPI deep packet inspection technology is a kind of detection technique based on application layer data, when IP packet, TCP or UDP message stream by based on the system of DPI technology the time, DPI can correctly extract described packet or traffic flow information, thereby mobile data services are monitored, control, discern, classify, added up.Embodiments of the invention adopt DPI detection technique and binding data net monitoring system characteristics, have solved DPI real-time protocol (RTP) decoding problem.Present embodiment can be applicable to the mobile data services system, complains system, fault location system as fault.Operator can carry out the miscellaneous service analysis by the present invention, thereby realizes network operation, optimization.
See also Fig. 1, Fig. 1 is the structural representation that the present invention is based on the DPI protocol-decoding equipment of stream.DPI protocol-decoding equipment 100 comprises data reception module 102, data distribution module 104, protocol type identification module 106, flow management module 108 and DPI processing module 110.
Wherein, data reception module 102 is used to receive mobile service data.Described data carry out beam split by router or switch or Port Mirroring is given DPI protocol-decoding equipment 100, and promptly router or switch duplicate portion with the data of being transmitted and issue DPI protocol-decoding equipment 100 in the network when transmitting data.
Protocol type identification module 106 is connected in data distribution module 104, is used for each thread to discerning through the protocol type of data of shunting, and abandons and belong to the data that do not need the protocol type analyzed.
See also Fig. 2, Fig. 2 is the structural representation that the present invention is based on the DPI protocol-decoding system of stream, and described system comprises router and DPI protocol-decoding equipment.Wherein, described router is used in communication network transfer sending service data, and the data of being transmitted is duplicated portion issue described DPI protocol-decoding equipment; Described DPI protocol-decoding equipment is parallel on the described router, be used to receive the data that described router sends, the data of described reception are shunted and the data after the shunting carried out protocol type judge, again data in each agreement are carried out flow management, guarantee that same data flow sends in the same DPI processing module and decode, by the DPI processing module data are carried out protocol-decoding at last.This mode that inserts in parallel is owing to be independently to carry out data protocol to decode, so it is less that mobile system is carried out the influence of data communication.
See also Fig. 3, Fig. 3 is the method embodiment flow chart of system when carrying out protocol-decoding shown in Figure 2, and described method comprises the steps:
Step 301:DPI processing module is carried out initialization, and loads the regular expression rule base after the compiling.Wherein, DPI chip in the DPI processing module is through ability operate as normal after the initialization, this step carries out also comprising before the initialization in the DPI processing module: described regular expression rule base is compiled, convert thereof into the DPI chip and can discern the data of form, the DPI processing module could be carried out the DPI protocol-decoding to the data message like this;
Step 302: described data reception module reads business datum, and it is issued described data distribution module.This step comprises that also described router is when transmitting business datum and the data of being transmitted are duplicated portion issue described data reception module;
Step 303: after described data distribution module receives described data, it is shunted.Promptly analyze to extract the stream information of user in the data, and according to described user's stream information described data are distributed in the different threads and handle.Wherein, for tcp data stream, adopt five-tuple to shunt.Described five-tuple comprises source IP address, purpose IP address, source port, destination interface and protocol type.So, it is assigned in the different threads according to source IP address, purpose IP address, source port, destination interface and the protocol type of tcp data stream; For UDP message stream, then need to analyze a certain keyword of its application layer and be that traffic ID could distinguish whether is same stream, promptly same business procedure.So come UDP message stream is carried out flow management according to source IP address, source port, traffic ID, protocol type.As business of networking in the WSP agreement, be to determine by the teid among its source IP address, source port, the WTP, protocol type.Described data are by after the data distribution module, and different data flow is distributed to parallel processing the in the different threads, thereby has improved processing speed;
Step 304: the described protocol type identification module of each thread is discerned the protocol type of the data of process shunting, obtains the protocol type of described data;
Step 305: judge whether described data need to decode,, then directly abandon described data, otherwise carry out step 306 if do not need.Wherein, the method for judgement is to require to judge the data of certain protocol type according to reality whether needs are decoded;
Step 306: the data after the described flow management module of each thread is discerned protocol type are carried out flow management, make same data flow be distributed to identical DPI processing module and handle.Described flow management comprises foundation, maintenance, deletion, aging the managing to data flow;
Step 307: described DPI processing module is carried out the DPI protocol-decoding according to the regular expression rule base to the data of process flow management module.After described DPI processing module has been obtained the protocol type of described data, find and described data protocol type corresponding protocols decoding rule according to the regular expression rule base; Again the packet that comprises described data is scanned, from described packet, extract the output information of described data according to described protocol-decoding rule.
Need to prove that bag scanning is striden in the support of described DPI processing module.For striding the bag data message, then in next data message, export the result, comprise in the even described output information and stride the bag field, then need in last bag and current bag, take out the corresponding field result, can obtain described output information of striding bag.In addition, because what adopt in the present embodiment is the method for regular expression rule base matching and decoding, described output information is the side-play amount of the described relatively packet of matched position, extracts decoded information so step 307 also comprises according to described output information from described packet.
Than prior art, the present invention engages by DPI hardware technology and regular expression rule base, and adopts multithreading that the user service data of complexity is carried out the hardware decoding.Because under the same conditions, DPI hardware decoding speed is more than 10 times of software decode speed, so the present invention has improved decoding speed greatly, satisfy the real-time decoding requirement, and because the DPI hardware supports is striden bag scanning, only the last bag in data flow of need preservation and the information of current bag so this has just significantly reduced the demand to server memory, have reduced cost.
Only be preferred case study on implementation of the present invention below, be not limited to the present invention, for a person skilled in the art, the present invention can have various changes and variation.Within the spirit and principles in the present invention all, any modification of being done, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.
Claims (10)
1, a kind of decoding depth message detection protocol method based on stream is characterized in that described method comprises:
Receive business data flow, different data flow is distributed in the different threads handles;
The protocol type of the described data flow in identification shunting back is distributed to the same depth message with same data flow and detects processing module;
Deep message detects processing module and calls the regular expression rule base, and described data are carried out protocol-decoding.
2, according to the described decoding depth message detection protocol method of claim 1, it is characterized in that described deep message detects processing module and calls the regular expression rule base, described data is carried out protocol-decoding comprise based on stream:
After described deep message detection processing module is obtained the protocol type of described data, find and described data protocol type corresponding protocols decoding rule according to the regular expression rule base;
The packet that comprises described data is scanned, from described packet, extract the output information of described data according to described protocol-decoding rule;
From described packet, extract the decoded information of described data according to described output information.
3, according to the described decoding depth message detection protocol method based on stream of claim 1, it is characterized in that, comprise before the described reception business data flow: deep message detects the regular expression rule base after processing module is carried out initialization and loaded compiling.
4, according to the described decoding depth message detection protocol method of claim 3, it is characterized in that described method also comprises based on stream:
Described regular expression rule base is compiled, convert thereof into deep message and detect the data that processing module can be discerned form.
5, according to the described decoding depth message detection protocol method of claim 1, it is characterized in that based on stream, described different data flow is distributed in the different threads to handle comprise:
Analyze to extract the stream information of user in the data, and according to described user's stream information described data are distributed in the different threads and handle.
6, according to the described decoding depth message detection protocol method of claim 5, it is characterized in that described method specifically comprises based on stream:
For tcp data stream,, it is assigned in the different threads according to source IP address, purpose IP address, source port, destination interface and the protocol type of tcp data stream;
For UDP message stream, it is assigned in the different threads according to source IP address, source port, traffic ID, the protocol type of UDP message stream.
According to the decoding depth message detection protocol method based on stream of claim 1, it is characterized in that 7, the protocol type of the described data flow in described identification shunting back is distributed to same depth message detection processing module with same data flow and comprises:
The protocol type that passes through the data flow of shunting is discerned, obtained the protocol type of data in the described data flow;
The protocol type that requires according to reality is judged data in the described data flow, and whether needs are decoded, if do not need then directly to abandon described data, if need, then same data flow are distributed to the same depth message and detect processing module.
8, according to the decoding depth message detection protocol method based on stream of claim 7, it is characterized in that, describedly same data flow is distributed to the same depth message detects processing module and comprise:
When receiving new data flow, set up new stream table;
When receiving data message, in described stream table, search earlier its corresponding stream number, if can find, judge again whether described data message is last bag, if not, then described data message is included in the corresponding data flow, otherwise the deletion of flowing;
When described data flow occurs out of order or repeating transmission and described data flow when normally not deleted, start timer and in timing, described data flow is deleted.
9, a kind of decoding depth message detection protocol equipment based on stream is characterized in that, described equipment comprises that data reception module, data distribution module, protocol type identification module, flow management module and deep message detect processing module, wherein:
Described data reception module is used to receive mobile service data;
Described data distribution module is connected in described data reception module, is used for that different data flow is distributed to different threads and handles;
Described protocol type identification module is connected in described data distribution module, is used for each thread the protocol type of the data of process shunting is discerned;
Described flow management module is connected in described protocol type identification module, is used for each thread same data flow is distributed to same depth message detection processing module;
Deep message detects processing module, is connected in described flow management module, is used to call the regular expression rule base to carrying out protocol-decoding through the data of flow management module.
10, a kind of decoding depth message detection protocol system based on stream is characterized in that described system comprises routing device and decoding depth message detection protocol equipment, wherein:
Described routing device is used for the transmission network communication data and simultaneously the data of being transmitted is duplicated portion issuing described decoding depth message detection protocol equipment;
Described decoding depth message detection protocol equipment, be used to receive the business datum that described routing device sends, different data flow is distributed in the different threads handles, protocol type to described data is discerned, to be distributed to the same depth message through the same data flow after the protocol type identification and detect processing module, and call the regular expression rule base described data are carried out protocol-decoding.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN 200910108357 CN101605018A (en) | 2009-06-17 | 2009-06-17 | A kind of decoding depth message detection protocol method, equipment and system based on stream |
| PCT/CN2010/072010 WO2010145306A1 (en) | 2009-06-17 | 2010-04-21 | Method, device and system for protocol decoding based on data stream |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN 200910108357 CN101605018A (en) | 2009-06-17 | 2009-06-17 | A kind of decoding depth message detection protocol method, equipment and system based on stream |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101605018A true CN101605018A (en) | 2009-12-16 |
Family
ID=41470582
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN 200910108357 Pending CN101605018A (en) | 2009-06-17 | 2009-06-17 | A kind of decoding depth message detection protocol method, equipment and system based on stream |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN101605018A (en) |
| WO (1) | WO2010145306A1 (en) |
Cited By (27)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2010145306A1 (en) * | 2009-06-17 | 2010-12-23 | 中兴通讯股份有限公司 | Method, device and system for protocol decoding based on data stream |
| CN102147766A (en) * | 2010-12-17 | 2011-08-10 | 曙光信息产业股份有限公司 | Method for maintaining TCP (Transmission Control Protocol) stream table structure and unordered buffer area |
| CN102185723A (en) * | 2011-05-27 | 2011-09-14 | 杭州迪普科技有限公司 | Session management method and device |
| CN102325129A (en) * | 2011-07-14 | 2012-01-18 | 广州致远电子有限公司 | Self-defined protocol decoding technique for measurement and analysis instrument |
| CN102497297A (en) * | 2011-12-13 | 2012-06-13 | 曙光信息产业(北京)有限公司 | System and method for realizing deep packet inspection technology based on multi-core and multi-thread |
| CN102722544A (en) * | 2012-05-24 | 2012-10-10 | 北京国双科技有限公司 | Method and device for decoding character strings |
| CN103491069A (en) * | 2013-09-05 | 2014-01-01 | 北京科能腾达信息技术股份有限公司 | Filtering method for network data package |
| WO2014029094A1 (en) * | 2012-08-23 | 2014-02-27 | 华为技术有限公司 | Packet processing method, deep packet inspection requesting network element, and deep packet inspection device |
| CN103685224A (en) * | 2013-09-05 | 2014-03-26 | 北京安博达通科技有限责任公司 | A network invasion detection method |
| CN103685222A (en) * | 2013-09-05 | 2014-03-26 | 北京科能腾达信息技术股份有限公司 | A data matching detection method based on a determinacy finite state automation |
| CN103685221A (en) * | 2013-09-05 | 2014-03-26 | 北京科能腾达信息技术股份有限公司 | A network invasion detection method |
| CN103841096A (en) * | 2013-09-05 | 2014-06-04 | 北京科能腾达信息技术股份有限公司 | Intrusion detection method with matching algorithm automatically adjusted |
| CN104023000A (en) * | 2013-09-05 | 2014-09-03 | 田玥 | Network intrusion detection method |
| CN104283801A (en) * | 2013-07-04 | 2015-01-14 | 中兴通讯股份有限公司 | Method and system for processing service data |
| CN104837073A (en) * | 2015-05-12 | 2015-08-12 | 无锡天脉聚源传媒科技有限公司 | Method and device for decoding WMV (Windows Media Video) file |
| CN108259243A (en) * | 2018-01-12 | 2018-07-06 | 深圳市卓讯信息技术有限公司 | Data processing method, terminal and computer storage media based on micro services Technical Architecture |
| CN109299218A (en) * | 2018-08-31 | 2019-02-01 | 北京奇安信科技有限公司 | A kind of method and device that user information is extracted |
| CN109412893A (en) * | 2018-10-23 | 2019-03-01 | 新华三信息安全技术有限公司 | A kind of message back method and device |
| CN109495404A (en) * | 2018-12-14 | 2019-03-19 | 北京金山云网络技术有限公司 | A kind of message processing method, device, switch device and storage medium |
| CN109656560A (en) * | 2017-10-11 | 2019-04-19 | 深圳市中兴微电子技术有限公司 | A kind of coding/decoding method, device and storage medium |
| CN109995606A (en) * | 2018-01-02 | 2019-07-09 | 中国移动通信有限公司研究院 | Virtualize deep-packet detection vDPI flow control methods and network element device |
| CN111756686A (en) * | 2020-05-18 | 2020-10-09 | 武汉思普崚技术有限公司 | Firewall equipment regular matching method and device and computer readable storage medium |
| CN114064784A (en) * | 2022-01-17 | 2022-02-18 | 湖南科德信息咨询集团有限公司 | Enterprise research and development expense intelligent collection method and system and electronic equipment |
| CN114760256A (en) * | 2022-04-14 | 2022-07-15 | 曙光网络科技有限公司 | Data processing method, device, equipment and storage medium |
| CN115333965A (en) * | 2022-07-19 | 2022-11-11 | 广西电网有限责任公司电力科学研究院 | SV data processing method and system of high-voltage switch |
| CN116545772A (en) * | 2023-07-04 | 2023-08-04 | 杭州海康威视数字技术股份有限公司 | Protocol identification method, device and equipment for lightweight Internet of things traffic |
| CN117082162A (en) * | 2023-10-19 | 2023-11-17 | 广东机电职业技术学院 | High-reliability data message deep analysis method and system |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105573300B (en) * | 2016-01-29 | 2018-01-16 | 广州能迪能源科技股份有限公司 | A kind of data acquisition dubbing system and its control method based on Internet of Things |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101127691A (en) * | 2006-08-17 | 2008-02-20 | 王玉鹏 | A method for implementing stream-based policy routing on network processor |
| CN101605018A (en) * | 2009-06-17 | 2009-12-16 | 中兴通讯股份有限公司 | A kind of decoding depth message detection protocol method, equipment and system based on stream |
-
2009
- 2009-06-17 CN CN 200910108357 patent/CN101605018A/en active Pending
-
2010
- 2010-04-21 WO PCT/CN2010/072010 patent/WO2010145306A1/en active Application Filing
Cited By (37)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2010145306A1 (en) * | 2009-06-17 | 2010-12-23 | 中兴通讯股份有限公司 | Method, device and system for protocol decoding based on data stream |
| CN102147766A (en) * | 2010-12-17 | 2011-08-10 | 曙光信息产业股份有限公司 | Method for maintaining TCP (Transmission Control Protocol) stream table structure and unordered buffer area |
| CN102185723A (en) * | 2011-05-27 | 2011-09-14 | 杭州迪普科技有限公司 | Session management method and device |
| CN102325129A (en) * | 2011-07-14 | 2012-01-18 | 广州致远电子有限公司 | Self-defined protocol decoding technique for measurement and analysis instrument |
| CN102497297A (en) * | 2011-12-13 | 2012-06-13 | 曙光信息产业(北京)有限公司 | System and method for realizing deep packet inspection technology based on multi-core and multi-thread |
| CN102722544A (en) * | 2012-05-24 | 2012-10-10 | 北京国双科技有限公司 | Method and device for decoding character strings |
| CN104145451A (en) * | 2012-08-23 | 2014-11-12 | 华为技术有限公司 | Packet processing method, deep packet inspection requesting network element, and deep packet inspection device |
| US9461894B2 (en) | 2012-08-23 | 2016-10-04 | Huawei Technologies Co., Ltd. | Packet processing method, deep packet inspection request network element and deep packet inspection device |
| WO2014029094A1 (en) * | 2012-08-23 | 2014-02-27 | 华为技术有限公司 | Packet processing method, deep packet inspection requesting network element, and deep packet inspection device |
| CN104145451B (en) * | 2012-08-23 | 2017-07-14 | 华为技术有限公司 | Message processing method, deep-packet detection request network element and deep packet inspection device |
| CN104283801A (en) * | 2013-07-04 | 2015-01-14 | 中兴通讯股份有限公司 | Method and system for processing service data |
| CN103685224A (en) * | 2013-09-05 | 2014-03-26 | 北京安博达通科技有限责任公司 | A network invasion detection method |
| CN104023000A (en) * | 2013-09-05 | 2014-09-03 | 田玥 | Network intrusion detection method |
| CN103841096A (en) * | 2013-09-05 | 2014-06-04 | 北京科能腾达信息技术股份有限公司 | Intrusion detection method with matching algorithm automatically adjusted |
| CN103685221A (en) * | 2013-09-05 | 2014-03-26 | 北京科能腾达信息技术股份有限公司 | A network invasion detection method |
| CN103685222A (en) * | 2013-09-05 | 2014-03-26 | 北京科能腾达信息技术股份有限公司 | A data matching detection method based on a determinacy finite state automation |
| CN103491069A (en) * | 2013-09-05 | 2014-01-01 | 北京科能腾达信息技术股份有限公司 | Filtering method for network data package |
| CN104837073B (en) * | 2015-05-12 | 2018-02-09 | 无锡天脉聚源传媒科技有限公司 | A kind of coding/decoding method and device of WMV files |
| CN104837073A (en) * | 2015-05-12 | 2015-08-12 | 无锡天脉聚源传媒科技有限公司 | Method and device for decoding WMV (Windows Media Video) file |
| CN109656560A (en) * | 2017-10-11 | 2019-04-19 | 深圳市中兴微电子技术有限公司 | A kind of coding/decoding method, device and storage medium |
| CN109995606A (en) * | 2018-01-02 | 2019-07-09 | 中国移动通信有限公司研究院 | Virtualize deep-packet detection vDPI flow control methods and network element device |
| CN109995606B (en) * | 2018-01-02 | 2021-09-14 | 中国移动通信有限公司研究院 | Virtualization deep packet inspection vDPI flow control method and network element equipment |
| CN108259243A (en) * | 2018-01-12 | 2018-07-06 | 深圳市卓讯信息技术有限公司 | Data processing method, terminal and computer storage media based on micro services Technical Architecture |
| CN109299218B (en) * | 2018-08-31 | 2021-01-29 | 奇安信科技集团股份有限公司 | Method and device for extracting user information |
| CN109299218A (en) * | 2018-08-31 | 2019-02-01 | 北京奇安信科技有限公司 | A kind of method and device that user information is extracted |
| CN109412893A (en) * | 2018-10-23 | 2019-03-01 | 新华三信息安全技术有限公司 | A kind of message back method and device |
| CN109495404A (en) * | 2018-12-14 | 2019-03-19 | 北京金山云网络技术有限公司 | A kind of message processing method, device, switch device and storage medium |
| CN109495404B (en) * | 2018-12-14 | 2021-03-26 | 北京金山云网络技术有限公司 | Message processing method and device, switch equipment and storage medium |
| CN111756686A (en) * | 2020-05-18 | 2020-10-09 | 武汉思普崚技术有限公司 | Firewall equipment regular matching method and device and computer readable storage medium |
| CN111756686B (en) * | 2020-05-18 | 2022-04-26 | 武汉思普崚技术有限公司 | Firewall equipment regular matching method and device and computer readable storage medium |
| CN114064784A (en) * | 2022-01-17 | 2022-02-18 | 湖南科德信息咨询集团有限公司 | Enterprise research and development expense intelligent collection method and system and electronic equipment |
| CN114760256A (en) * | 2022-04-14 | 2022-07-15 | 曙光网络科技有限公司 | Data processing method, device, equipment and storage medium |
| CN114760256B (en) * | 2022-04-14 | 2024-01-30 | 曙光网络科技有限公司 | Data processing method, device, equipment and storage medium |
| CN115333965A (en) * | 2022-07-19 | 2022-11-11 | 广西电网有限责任公司电力科学研究院 | SV data processing method and system of high-voltage switch |
| CN116545772A (en) * | 2023-07-04 | 2023-08-04 | 杭州海康威视数字技术股份有限公司 | Protocol identification method, device and equipment for lightweight Internet of things traffic |
| CN116545772B (en) * | 2023-07-04 | 2023-09-19 | 杭州海康威视数字技术股份有限公司 | Protocol identification method, device and equipment for lightweight Internet of Things traffic |
| CN117082162A (en) * | 2023-10-19 | 2023-11-17 | 广东机电职业技术学院 | High-reliability data message deep analysis method and system |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2010145306A1 (en) | 2010-12-23 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101605018A (en) | A kind of decoding depth message detection protocol method, equipment and system based on stream | |
| CN101360088B (en) | Regular expression compiling, matching system and compiling, matching method | |
| CN106815112B (en) | Massive data monitoring system and method based on deep packet inspection | |
| CN103856417B (en) | software defined network message forwarding method and system | |
| CN103873356B (en) | Application and identification method, system and home gateway based on home gateway | |
| CN101924695A (en) | Method and system based on the packet classification of efficiency | |
| CN106789242A (en) | A kind of identification application intellectual analysis engine based on mobile phone client software behavioral characteristics storehouse | |
| CN110855493A (en) | Application topological graph drawing device for mixed environment | |
| CN101635720B (en) | Filtering method of unknown flow rate and bandwidth management equipment | |
| CN100583830C (en) | Method and apparatus for gathering and analyzing flux | |
| CN106550241A (en) | Video traffic identifying system and virtualization dispositions method | |
| CN102497297A (en) | System and method for realizing deep packet inspection technology based on multi-core and multi-thread | |
| CN101159780A (en) | Inter-network routing system and method of telecommunication integrated service access gateway | |
| CN102201990A (en) | Service control method and system for autonomous network | |
| CN102546364B (en) | Network data distribution method and device | |
| CN101951330A (en) | Bidirectional joint detection device and method | |
| CN101340370B (en) | Link selection method and apparatus | |
| CN102045131B (en) | Service linkage control system and method | |
| CN113328956A (en) | Message processing method and device | |
| CN102739537B (en) | The retransmission method and device of Ethernet data bag | |
| CN115361334B (en) | SD-WAN traffic identification method based on deep packet inspection technology | |
| CN101510843A (en) | Method for real time separation of P2P flow based on NetFlow flow | |
| CN105376099B (en) | Acquire the method and system of virtual network flow in data switching exchane | |
| CN102833772A (en) | Method and device for judging base transceiver station single-route and service configuration hidden trouble | |
| CN101714950A (en) | Method and device for realizing fault positioning |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C12 | Rejection of a patent application after its publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20091216 |