应用层流量识别方法的设计与实现  

Design and Implementation of Traffic Identification of Application-layer Services

作　　者：朱婷婷 徐平平[1] 张苏横 

机构地区：[1]东南大学移动通信国家重点实验室,江苏南京210096 [2]江苏金智科技股份有限公司,江苏南京210096

出　　处：《军事通信技术》2010年第2期53-58,共6页Journal of Military Communications Technology

基　　金：新一代宽带无线移动通信网国家科技重大专项资助项目(2009ZX03006-002);国家高技术研究发展计划(863计划)资助项目(2006AA10Z258);东南大学移动通信实验室自主研究课题资助项目(2010A05);北邮泛网无线通信实验室开放基金资助项目(030801)

摘　　要：准确识别以太网中各种应用层流量在网络管理和监控中发挥的重要作用。典型的应用层流量识别方法有基于应用层签名和基于流量特征的流量识别。文中分析了以上两种方法的基本思想、优缺点和适用范围,给出了应用层流量识别实现的方法和步骤。在Visual Studio 6.0环境下进行了实验,利用Winpcap对各种应用层流量进行抓包,通过分析数据包的特点,选择合适的识别方法,实现了应用层流量识别,实验结果显示识别准确率可以达到90%以上,验证了文中所用流量识别方法的可行性。Accurately identifying applicationlayer traffic plays an important role in network management and monitoring.Typical application-layer traffic identification methods are based on application layer signatures and flow characteristics.This paper analyzed the basic ideas,advantages and disadvantages,as well as the scope of application of the above two methods,and then designed experiments to realize the two methods.In the Visual Studio 6.0 environment,by capturing data packets based on Winpcap and analyzing the packets,the specific type of traffic can be identified with appropriate methods based on the traffic characteristics of the application-layer services.Traffic identification results reveal that the accuracy rates can be higher than 90%,which verifies the feasibility of the corresponding methods used in this paper.

关 键 词：应用层流量 流量识别 应用层签名 流量特征 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]