CN106330603A - Connection detection method and system, client side, and DPI equipment - Google Patents
Connection detection method and system, client side, and DPI equipment Download PDFInfo
- Publication number
- CN106330603A CN106330603A CN201610705203.XA CN201610705203A CN106330603A CN 106330603 A CN106330603 A CN 106330603A CN 201610705203 A CN201610705203 A CN 201610705203A CN 106330603 A CN106330603 A CN 106330603A
- Authority
- CN
- China
- Prior art keywords
- tuple information
- information
- title
- dpi equipment
- tuple
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0805—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability
- H04L43/0811—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability by checking connectivity
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/02—Capturing of monitoring data
- H04L43/028—Capturing of monitoring data by filtering
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/02—Capturing of monitoring data
- H04L43/026—Capturing of monitoring data using flow identification
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Environmental & Geological Engineering (AREA)
- Computer And Data Communications (AREA)
Abstract
The invention provides a connection detection method and system, a client side, and DPI equipment. The method comprises the following steps of: obtaining a process ID corresponding to the process name of an application process to be detected; obtaining all connections corresponding to the process ID; respectively obtaining quintuple information of all the connections; sending the obtained all quintuple information to the DPI equipment; receiving detection information fed back by the DPI equipment according to the received all quintuple information, wherein the DPI equipment inquires the name of the application process corresponding to the received quintuple information in a list according to the received quintuple information, integrates inquiry results in the list according to all the quintuple information, and generates detection information; and performing corresponding display according to the received detection information. According to the displayed detection information, conditions of all the connections of the application process to be detected can be observed effectively and intuitionally; and furthermore, the identification accuracy of the DPI equipment can be evaluated effectively and intuitionally.
Description
Technical field
The present invention relates to communication technical field, particularly relate to a kind of connection detection method and system, client and DPI
Equipment.
Background technology
DPI (Deep Packet Inspection, deep-packet detection) is a kind of 7 layer protocol analytical technologies.By resolving
Application layer data, i.e. TCP/UDP message mates the protocol characteristic of application, thus distinguishes a kind of agreement solution of various application process
Analysis means.
The accuracy that DPI identifies judges never effective way.Separate with DPI equipment because performing the terminal of application,
Connecting and there is the reasons such as ageing, being difficult to the identification situation that tracing detection every connects, so also being difficult to the identification to DPI engine
Accuracy is assessed.
Summary of the invention
The shortcoming of prior art in view of the above, it is an object of the invention to provide a kind of connection detection method and is
System, client and DPI equipment, can not effectively detect for solving in prior art in all connections of application processes
Problem.
For achieving the above object and other relevant purposes, the present invention provides a kind of and connects detection method, is applied to a client
In end, described client is associated with a DPI equipment in advance, described DPI equipment be configured with include five-tuple information and with
The list of the title of the application process that described five-tuple information is corresponding；Described method includes: obtain and application process to be detected
Process ID corresponding to process title；Obtain all connections corresponding with described process ID；Obtain all described connections respectively
Five-tuple information；The all described five-tuple information obtained is sent to described DPI equipment；Receive described DPI equipment according to connecing
The all described five-tuple information received and the detection information fed back；Wherein, described DPI equipment is according to the described five-tuple letter received
Breath inquires about the title of the application process corresponding with the described five-tuple information received in described list, and to according to all described
The result that five-tuple information is inquired about in described list carries out comprehensively, generating described detection information；According to the described detection received
Information shows accordingly.
In the present invention one specific embodiment, it is additionally included in and judges that the process name of described application process to be detected is referred to as having
After the process title of effect, just start to perform the step of the described acquisition process ID corresponding with the process title of application process to be detected
Suddenly；And/or after being additionally included in the described process ID of acquisition, it is judged that described process ID is the most effective, and after described process ID is effective,
Just start to perform the step of the described acquisition all connections corresponding with described process ID；And/or be additionally included in acquisition with described enter
After described all connections that journey ID is corresponding, it is judged that described all connections are the most effective, and in the described effective situation of all connections
Under, just start the step performing to obtain the five-tuple information of all described connections respectively；And/or described DPI equipment is receiving
After described five-tuple information, it is judged that described five-tuple information is the most effective, and in all described effective situations of five-tuple information
Under, just start the described five-tuple information pair performing to inquire about in described list according to the described five-tuple information received and receive
The step of the title of the application process answered.
In the present invention one specific embodiment, also include judging that what described detection information included believes with all described five-tuples
The title of all application processes that breath is corresponding is the most identical, and when for time no, performs the warning operation preset.
For achieving the above object and other relevant purposes, the present invention also provides for a kind of connecting detecting system, is applied to a visitor
In the end of family, described client is associated with a DPI equipment in advance, described DPI equipment be configured with include five-tuple information and
The list of the title of the application process corresponding with described five-tuple information；Described system includes: process ID acquisition module, in order to obtain
Take the process ID corresponding with the process title of application process to be detected；Connect acquisition module, in order to obtain and described process ID
Corresponding all connections；Five-tuple data obtaining module, in order to obtain the five-tuple information of all described connections respectively；Five-tuple
Information sending module, sends to described DPI equipment in order to all described five-tuple information that will obtain；Feedback information receives mould
Block, in order to receive the detection information that described DPI equipment feeds back according to all described five-tuple information received；Wherein, described
DPI equipment inquires about answer corresponding with the described five-tuple information received according to the described five-tuple information received in described list
By the title of process, and the result inquired about in described list according to all described five-tuple information is carried out comprehensively, generate institute
State detection information；Display module, in order to show accordingly according to the described detection information received.
For achieving the above object and other relevant purposes, the present invention also provides for a kind of client, applies as above any one institute
The connection detection method stated.
For achieving the above object and other relevant purposes, the present invention also provides for a kind of connecting detection method, is applied to a DPI
In equipment, described DPI equipment is associated with a client in advance, described DPI equipment be configured with include five-tuple information and
The list of the title of the application process corresponding with described five-tuple information；Described method includes: receives and sends from described client
All five-tuple information；Wherein, described five-tuple information is that described client is according to obtaining and application process to be detected
The process ID that process title is corresponding, and after obtaining all connections corresponding with described process ID, and that obtain with all described companies
Connect the most corresponding five-tuple information；Described five inquiring about in described list according to the described five-tuple information received and receiving
The title of the application process that tuple information is corresponding；Carry out according to the result that all described five-tuple information are inquired about in described list
Comprehensively, generate described detection information, and to described client feedback.
In the present invention one specific embodiment, also include, receiving the described five-tuple letter sent from described client
After breath, it is judged that described five-tuple information is the most effective, and in the case of described five-tuple information is effective, start to perform according to connecing
The described five-tuple information received inquires about the title of the application process corresponding with the described five-tuple information received in described list
Step.
For achieving the above object and other relevant purposes, the present invention also provides for a kind of connecting detecting system, is applied to a DPI
In equipment, described DPI equipment is associated with a client in advance, and described system includes: configuration module, includes five in order to configure
The list of the title of tuple information and the application process corresponding with described five-tuple information；Five-tuple information receiving module, uses
The all five-tuple information sent from described client with reception；Wherein, described five-tuple information is that described client is according to obtaining
Take the process ID corresponding with the process title of application process to be detected, and obtain all connections corresponding with described process ID
After, and the five-tuple information the most corresponding with all described connections obtained；Enquiry module, in order to according to described five yuan received
Group information inquires about the title of the application process corresponding with the described five-tuple information received in described list；Feedback module, root
The result inquired about in described list according to all described five-tuple information carries out comprehensively, generating described detection information, and to described
Client feedback.
For achieving the above object and other relevant purposes, the present invention also provides for a kind of DPI equipment, and application connects as above
Connect detection method.
As it has been described above, the connection detection method of the present invention and system, client and DPI equipment, described method includes obtaining
The process ID corresponding with the process title of application process to be detected；Obtain all connections corresponding with described process ID；Respectively
Obtain the five-tuple information of all described connections；The all described five-tuple information obtained is sent to described DPI equipment；Receive
The detection information that described DPI equipment feeds back according to all described five-tuple information received；Wherein, described DPI equipment according to
The described five-tuple information received inquires about the name of the application process corresponding with the described five-tuple information received in described list
Claim, and carry out comprehensively, generating described detection information to the result inquired about in described list according to all described five-tuple information；
And show accordingly according to the described detection information received.I.e. can be the most right according to the detection information of display
The situation of all connections of application process to be detected is observed, and can identification accuracy to DPI equipment the most intuitively
Make assessment.
Accompanying drawing explanation
Fig. 1 is shown as the communication system of present invention composition schematic diagram in one embodiment.
Fig. 2 is shown as the connection detection method of present invention schematic flow sheet in one embodiment.
Fig. 3 is shown as in a specific embodiment of the present invention interface schematic diagram showing detection.
Fig. 4 is shown as the communication system of present invention module diagram in one embodiment.
Fig. 5 is shown as the present invention and connects detection method schematic flow sheet in one embodiment.
Element numbers explanation
1 client
11 connect detecting system
111 process ID acquisition modules
112 connect acquisition module
113 five-tuple data obtaining module
114 five-tuple information sending module
115 feedback information receiver modules
2 DPI equipment
21 connect detecting system
211 configuration modules
212 five-tuple information receiving modules
213 enquiry modules
214 feedback modules
S11～S15, S21～S23 step
Detailed description of the invention
Below by way of specific instantiation, embodiments of the present invention being described, those skilled in the art can be by this specification
Disclosed content understands other advantages and effect of the present invention easily.The present invention can also be by the most different concrete realities
The mode of executing is carried out or applies, the every details in this specification can also based on different viewpoints and application, without departing from
Various modification or change is carried out under the spirit of the present invention.It should be noted that, in the case of not conflicting, following example and enforcement
Feature in example can be mutually combined.
It should be noted that the diagram provided in following example illustrates the basic structure of the present invention the most in a schematic way
Think, component count, shape and size when then only showing the assembly relevant with the present invention rather than implement according to reality in diagram
Drawing, during its actual enforcement, the kenel of each assembly, quantity and ratio can be a kind of random change, and its assembly layout kenel is also
It is likely more complexity.
Refer to Fig. 1, be shown as the communication system of present invention schematic diagram in one embodiment.The communication of the present invention
System includes client 1 and the DPI equipment 2 being arranged in router, described client 1 for example, desktop computer, mobile electron
Equipment etc..Described client 1 communicates with described DPI equipment 2, and described DPI equipment 2 be configured with include five-tuple information with
And the list of the title of the application process corresponding with described five-tuple information, wherein five-tuple information be source IP address, source port,
Purpose IP address, destination interface and transport layer protocol, five-tuple information in described list and with described five-tuple information pair
The title of the application process answered, according to the recognition result of DPI equipment 2 and real-time update, is applied to the method in described client 1
As in figure 2 it is shown, comprise the following steps:
S11: obtain the process ID corresponding with the process title of application process to be detected；Preferably, by windows
Operating system performs tasklist order, the process ID corresponding with the process title of application process to be detected can be obtained；
Wherein, the process title for example, user of described application process to be detected carries out the process title inputted according to inputting interface,
According to or, the feature of the current application process opened automatically reads and obtains process title.
S12: obtain all connections corresponding with described process ID；Preferably, by performing in windows operating system
Netstat order obtains all connections corresponding with described process ID；
S13: obtain the five-tuple information of all described connections respectively；
S14: all described five-tuple information obtained is sent to described DPI equipment 2；
S15: receive the detection information that described DPI equipment 2 feeds back according to all described five-tuple information received；Its
In, the described five-tuple information that described DPI equipment is inquired about in described list according to the described five-tuple information received and received
The title of corresponding application process, and the result inquired about in described list according to all described five-tuple information (is identified knot
Really) carry out comprehensively, generating described detection information；Described detection information according to receiving shows accordingly.Described detection letter
Breath is the set of result inquired about in described list for each described five-tuple information, can in the way of as shown in Figure 3
Show there is each recognition result connecting correspondence the most respectively on the screen of described client 1.
In the present invention one specific embodiment, it is additionally included in and judges that the process name of described application process to be detected is referred to as having
After the process title of effect, just start to perform the step of the described acquisition process ID corresponding with the process title of application process to be detected
Suddenly；And/or after being additionally included in the described process ID of acquisition, it is judged that described process ID is the most effective, and after described process ID is effective,
Just start to perform the step of the described acquisition all connections corresponding with described process ID；And/or be additionally included in acquisition with described enter
After described all connections that journey ID is corresponding, it is judged that described all connections are the most effective, and in the described effective situation of all connections
Under, just start the step performing to obtain the five-tuple information of all described connections respectively；And/or described DPI equipment is receiving
After described five-tuple information, it is judged that described five-tuple information is the most effective, and in all described effective situations of five-tuple information
Under, just start the described five-tuple information pair performing to inquire about in described list according to the described five-tuple information received and receive
The step of the title of the application process answered.
In the be set forth in present invention one specific embodiment, also include judging that described detection information includes with all described five
The title of all application processes that tuple information is corresponding is the most identical, and when for time no, performs the warning operation preset.Described
Judgement can be the artificial judgement that operator are carried out according to the detection information of display, or the detection shown by reading
Information and the intelligent automatic decision that carries out.Described warning operation for example, disconnects between described client 1 and described DPI equipment 2
Communication, or send information warning by mail or instant messaging mode to person skilled.
Refer to Fig. 4, be shown as the communication system of present invention module diagram in one embodiment.Described connection
Detecting system 11 is applied in described client 1.Described connection detecting system 11 includes process ID acquisition module 111, connects and obtain
Delivery block 112, five-tuple data obtaining module 113, five-tuple information sending module 114, feedback information receiver module 115, with
And display module 116.
Described process ID acquisition module 111 is in order to obtain the process corresponding with the process title of application process to be detected
ID；
Described connection acquisition module 112, in order to obtain all connections corresponding with described process ID；
Described five-tuple data obtaining module 113, in order to obtain the five-tuple information of all described connections respectively；
Five-tuple information sending module 114, sets in order to all described five-tuple information obtained is sent extremely described DPI
Standby；
Feedback information receiver module 115, in order to receive described DPI equipment according to all described five-tuple information received
The detection information of feedback；Wherein, described DPI equipment is inquired about in described list according to the described five-tuple information received and receives
The title of application process corresponding to described five-tuple information, and look in described list according to all described five-tuple information
The result ask carries out comprehensively, generating described detection information；
Display module 116, in order to show accordingly according to the described detection information received.
Described connection detecting system 11 is the system entries corresponding with the connection detection method shown in Fig. 1, both technical schemes
One_to_one corresponding, the description of all about described connection detection method all can be applicable in the present embodiment, is not added with at this repeating.
Refer to Fig. 5, be shown as the connection detection method of present invention schematic flow sheet in one embodiment.Described
Connecting detection method to be applied in the DPI equipment 2 shown in Fig. 1, described method includes:
S21: receive all five-tuple information sent from described client 2；Wherein, described five-tuple information is described visitor
Family end 2 is according to obtaining the process ID corresponding with the process title of application process to be detected, and obtains corresponding with described process ID
All connections after, and obtain described connect respectively the most corresponding five-tuple information with all；
S22: the described five-tuple information pair inquired about in described list according to the described five-tuple information received and receive
The title of the application process answered；
S23: the result inquired about in described list according to all described five-tuple information carries out comprehensively, generating described detection
Information, and feed back to described client 2.
In the present invention one specific embodiment, also include, receiving the described five-tuple letter sent from described client
After breath, it is judged that described five-tuple information is the most effective, and in the case of described five-tuple information is effective, start to perform according to connecing
The described five-tuple information received inquires about the title of the application process corresponding with the described five-tuple information received in described list
Step.
Referring again to Fig. 4, it is shown as the communication system of present invention module diagram in one embodiment.Described company
Connecing detecting system 21 to be applied in described DPI equipment 2, described connection detecting system 21 includes configuring module 211, five-tuple information
Receiver module 212, enquiry module 213, feedback module 214.
In order to configure, described configuration module 211 includes that five-tuple information and the application corresponding with described five-tuple information are entered
The list of the title of journey；
Described five-tuple information receiving module 212 is in order to receive all five-tuple information sent from described client 1；Its
In, described five-tuple information is that described client 1 is according to obtaining the process corresponding with the process title of application process to be detected
ID, and after obtaining all connections corresponding with described process ID, and obtain distinguish the most corresponding five-tuple with all described connections
Information；
Described enquiry module 213 is in order to the institute inquired about in described list according to the described five-tuple information received and receive
State the title of application process corresponding to five-tuple information；
Described feedback module 214 carries out comprehensively according to the result that all described five-tuple information are inquired about in described list,
Generate described detection information, and feed back to described client 1.
Described connection detecting system 21 is the system entries corresponding with the described connection detection method shown in Fig. 5, both technology
Scheme one_to_one corresponding.
In sum, the connection detection method of the present invention and system, client and DPI equipment, described method includes obtaining
The process ID corresponding with the process title of application process to be detected；Obtain all connections corresponding with described process ID；Respectively
Obtain the five-tuple information of all described connections；The all described five-tuple information obtained is sent to described DPI equipment；Receive
The detection information that described DPI equipment feeds back according to all described five-tuple information received；Wherein, described DPI equipment according to
The described five-tuple information received inquires about the name of the application process corresponding with the described five-tuple information received in described list
Claim, and carry out comprehensively, generating described detection information to the result inquired about in described list according to all described five-tuple information；
And show accordingly according to the described detection information received.I.e. can be the most right according to the detection information of display
The situation of all connections of application process to be detected is observed, and can identification accuracy to DPI equipment the most intuitively
Make assessment.So, the present invention effectively overcomes various shortcoming of the prior art and has high industrial utilization.
The principle of above-described embodiment merely exemplary explanation present invention and effect thereof, not for limiting the present invention.Any ripe
Above-described embodiment all can be modified under the spirit and the scope of the present invention or change by the personage knowing this technology.Cause
This, have usually intellectual such as complete with institute under technological thought without departing from disclosed spirit in art
All equivalences become are modified or change, and must be contained by the claim of the present invention.
Claims (9)
1. one kind connect detection method, it is characterised in that be applied in a client, described client in advance with a DPI equipment
Being associated, described DPI equipment is configured with and includes five-tuple information and the application process corresponding with described five-tuple information
The list of title；Described method includes:
Obtain the process ID corresponding with the process title of application process to be detected；
Obtain all connections corresponding with described process ID；
Obtain the five-tuple information of all described connections respectively；
The all described five-tuple information obtained is sent to described DPI equipment；
Receive the detection information that described DPI equipment feeds back according to all described five-tuple information received；Wherein, described DPI
Equipment inquires about the application corresponding with the described five-tuple information received according to the described five-tuple information received in described list
The title of process, and the result inquired about in described list according to all described five-tuple information is carried out comprehensively, generate described
Detection information；
Described detection information according to receiving shows accordingly.
Connection detection method the most according to claim 1, it is characterised in that
It is additionally included in after judging that the process name of described application process to be detected is referred to as effective process title, just starts to perform institute
State the step obtaining the process ID corresponding with the process title of application process to be detected；And/or
After being additionally included in the described process ID of acquisition, it is judged that described process ID is the most effective, and after described process ID is effective, just open
Begin to perform the step of the described acquisition all connections corresponding with described process ID；And/or
It is additionally included in after obtaining described all connections corresponding with described process ID, it is judged that described all connections are the most effective, and
In the case of described all connections are effective, just start the step performing to obtain the five-tuple information of all described connections respectively；
And/or
Described DPI equipment is after receiving described five-tuple information, it is judged that described five-tuple information is the most effective, and in all institutes
State five-tuple information effective in the case of, just start to perform to inquire about in described list according to the described five-tuple information received and
The step of the title of application process corresponding to described five-tuple information received.
Connection detection method the most according to claim 1, it is characterised in that also include judging what described detection information included
The title of all application processes corresponding with all described five-tuple information is the most identical, and when for time no, execution is preset
Warning operation.
4. one kind connect detecting system, it is characterised in that be applied in a client, described client in advance with a DPI equipment
Being associated, described DPI equipment is configured with and includes five-tuple information and the application process corresponding with described five-tuple information
The list of title；Described system includes:
Process ID acquisition module, in order to obtain the process ID corresponding with the process title of application process to be detected；
Connect acquisition module, in order to obtain all connections corresponding with described process ID；
Five-tuple data obtaining module, in order to obtain the five-tuple information of all described connections respectively；
Five-tuple information sending module, sends to described DPI equipment in order to all described five-tuple information that will obtain；
Feedback information receiver module, feeds back according to all described five-tuple information received in order to receive described DPI equipment
Detection information；Wherein, described DPI equipment according to receive described five-tuple information inquire about in described list and receive described in
The title of the application process that five-tuple information is corresponding, and to the knot inquired about in described list according to all described five-tuple information
Fruit carries out comprehensive, generates described detection information；
Display module, in order to show accordingly according to the described detection information received.
5. a client, it is characterised in that application connection detection method according to any one of claims 1 to 3.
6. one kind connect detection method, it is characterised in that: be applied in a DPI equipment, described DPI equipment in advance with a client
Being associated, described DPI equipment is configured with and includes five-tuple information and the application process corresponding with described five-tuple information
The list of title；Described method includes:
Receive all five-tuple information sent from described client；Wherein, described five-tuple information be described client according to
Obtain the process ID corresponding with the process title of application process to be detected, and obtain all connections corresponding with described process ID
After, and the five-tuple information the most corresponding with all described connections obtained；
Described five-tuple information according to receiving inquires about the application corresponding with the described five-tuple information received in described list
The title of process；
The result inquired about in described list according to all described five-tuple information carries out comprehensively, generates described detection information, and
To described client feedback.
Connection detection method the most according to claim 6, it is characterised in that: also include, receiving from described client
After the described five-tuple information sent, it is judged that described five-tuple information is the most effective, and in the described effective feelings of five-tuple information
Under condition, start the described five-tuple information pair performing to inquire about in described list according to the described five-tuple information received and receive
The step of the title of the application process answered.
8. one kind connect detecting system, it is characterised in that: be applied in a DPI equipment, described DPI equipment in advance with a client
Being associated, described system includes:
Configuration module, in order to configure the title that includes five-tuple information and the application process corresponding with described five-tuple information
List；
Five-tuple information receiving module, in order to receive all five-tuple information sent from described client；Wherein, described five yuan
Group information is described client according to obtaining the process ID corresponding with the process title of application process to be detected, and acquisition and institute
After stating all connections that process ID is corresponding, and the five-tuple information the most corresponding with all described connections obtained；
Enquiry module, in order to the described five-tuple letter inquired about in described list according to the described five-tuple information received and receive
The title of the application process that breath is corresponding；
Feedback module, the result inquired about in described list according to all described five-tuple information carries out comprehensively, generating described inspection
Measurement information, and to described client feedback.
9. a DPI equipment, it is characterised in that application connection detection method described in claim 6 or 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610705203.XA CN106330603A (en) | 2016-08-22 | 2016-08-22 | Connection detection method and system, client side, and DPI equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610705203.XA CN106330603A (en) | 2016-08-22 | 2016-08-22 | Connection detection method and system, client side, and DPI equipment |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106330603A true CN106330603A (en) | 2017-01-11 |
Family
ID=57741516
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610705203.XA Pending CN106330603A (en) | 2016-08-22 | 2016-08-22 | Connection detection method and system, client side, and DPI equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106330603A (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102315974A (en) * | 2011-10-17 | 2012-01-11 | 北京邮电大学 | Stratification characteristic analysis-based method and apparatus thereof for on-line identification for TCP, UDP flows |
| CN103259699A (en) * | 2013-05-28 | 2013-08-21 | 华为技术有限公司 | Test method, test system, client-side and server-side |
| CN104320354A (en) * | 2014-10-21 | 2015-01-28 | 中国联合网络通信集团有限公司 | Data processing method and device |
| CN104394090A (en) * | 2014-11-14 | 2015-03-04 | 北京航空航天大学 | SDN (Software Defined Networking) controller classifying network flows through DPI (Deep Packet Inspection) data package |
| US9166988B1 (en) * | 2014-04-22 | 2015-10-20 | Korea Internet & Security Agency | System and method for controlling virtual network including security function |
| KR20160082434A (en) * | 2014-12-30 | 2016-07-08 | 주식회사 케이티 | Apparatus and system for managing user created signature and method thereof |
-
2016
- 2016-08-22 CN CN201610705203.XA patent/CN106330603A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102315974A (en) * | 2011-10-17 | 2012-01-11 | 北京邮电大学 | Stratification characteristic analysis-based method and apparatus thereof for on-line identification for TCP, UDP flows |
| CN103259699A (en) * | 2013-05-28 | 2013-08-21 | 华为技术有限公司 | Test method, test system, client-side and server-side |
| US9166988B1 (en) * | 2014-04-22 | 2015-10-20 | Korea Internet & Security Agency | System and method for controlling virtual network including security function |
| CN104320354A (en) * | 2014-10-21 | 2015-01-28 | 中国联合网络通信集团有限公司 | Data processing method and device |
| CN104394090A (en) * | 2014-11-14 | 2015-03-04 | 北京航空航天大学 | SDN (Software Defined Networking) controller classifying network flows through DPI (Deep Packet Inspection) data package |
| KR20160082434A (en) * | 2014-12-30 | 2016-07-08 | 주식회사 케이티 | Apparatus and system for managing user created signature and method thereof |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10084713B2 (en) | Protocol type identification method and apparatus | |
| US8787875B2 (en) | Aggregating multiple functions into a single platform | |
| CN110113345A (en) | A method of the assets based on Internet of Things flow are found automatically | |
| US20170134957A1 (en) | System and method for correlating network information with subscriber information in a mobile network environment | |
| CN105376114A (en) | System and method for identifying wireless terminal type in router network bridge mode | |
| CN103297270A (en) | Application type recognition method and network equipment | |
| CN106301825B (en) | DPI rule generation method and device | |
| CN106850568B (en) | Session aging method and device of multi-channel protocol | |
| EP3282752A1 (en) | Method, device, and system for identifying traffic flow | |
| US20140105119A1 (en) | System and method for correlating security events with subscriber information in a mobile network environment | |
| CN112398755B (en) | Traffic forwarding method, service card and system | |
| CN106656615B (en) | Message processing method and device based on TRACERT command | |
| CN113055238B (en) | Network detection method, platform and computer readable storage medium | |
| KR102171348B1 (en) | Method and apparatus for application detection | |
| CN112020862A (en) | Identifying devices on a remote network | |
| CN106535240A (en) | Mobile APP centralized performance analysis method based on cloud platform | |
| CN107592554A (en) | Live video retransmission method and device | |
| CN102970189B (en) | A kind of network data analysis method and system based on application layer data | |
| KR101344398B1 (en) | Router and method for application awareness and traffic control on flow based router | |
| US11356333B2 (en) | Predicting forwarding destinations for packets | |
| CN102904771B (en) | Network testing device and method thereof | |
| CN106330603A (en) | Connection detection method and system, client side, and DPI equipment | |
| CN109510821B (en) | Message processing method and device | |
| CN107948022B (en) | Identification method and identification device for peer-to-peer network traffic | |
| CN112910706B (en) | Automatic configuration method, system, device and readable storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20170111 |
|
| WD01 | Invention patent application deemed withdrawn after publication |