摘要
提出了一种方法来探测BitTorrent流量。该方法分析BitTorrent协议,识别BitTorrent协议特征,并对这些特征设定规则,使其能够被入侵探测系统识别,然后通过带有SNORT(一种开放源代码的IDS)的网络监控这些特征,达到探测数据流的目的。最后指出了探测网络流量研究的新方向。
A method to detect BitTorrent traffic is presented. It is based on the analysis ofthe protocol used by an application, extraction of specific patterns of the protocol, coding of such a pattern in rules to be fed to an intrusion detection system （IDS）, and validation of the pattern via network traffic monitoring with SNORT （an open source IDS） fed with the devised rules. Finally, a new research direction in the identification of network traffic is proposed.
出处
《计算机工程与设计》
CSCD
北大核心
2008年第2期357-359,共3页
Computer Engineering and Design
