一种基于业务流的IP分片实时识别方法

A Method of Real-Time Recognition of IP Fragment in Flow Based Application

基于业务流识别的技术领域中,少有文章专门针对IP分片识别进行研究,本文专门对此技术进行深入分析,提出一种高速有效、实时性强的"首片法"。其特点是:利用TCP/IP体系特征及IP分片自身的特点,不需用组装所有分片,只对首片进行深度识别,对后续分片只查找一个特殊哈希表,即得知自己的业务类别,极大减少识别时间。该方法非常适用于实时性要求高的路由器。此文中的"首片法"属于原创。

In the field of recognition of IP fragment in flow based application, few studies are given describing this technology, Depending on the TCP/IP system and the IP fragment＇ s characteristic. This paper focuses on the study on this technology, and gives a innovated ＂First fragment recognition＂ method which has the characteristic of real time and high efficiency. This method does not assemble, but knows the application type of all fragments by recognizing the first fragment deeply and searching in a special Hash table for the subsequent fragments, which is greatly applicable for the application implemention on the router.