基于DPI技术的P2P流量监控系统设计

The Design of P2P Detection System Based on DPI

随着互联网和宽带技术的发展,P2P的应用日益广泛。但随着P2P应用的发展,网络中也暴露出如违反版权法律法规、传播病毒木马等恶意程序、吞噬带宽、造成网络环境恶化等诸多问题。如何有效地控制P2P流量,关键在于如何有效地识别出实时网络中的P2P流量,这也是网络运营商和一些公司高度重视的难点问题。传统的以固定端口方式识别已经很难准确检测P2P流量,而DPI技术是一种相对简单、高效的数据流检测技术,将此技术运用于P2P流量监测控制中,将大大提高协议的识别效率和准确度。以典型的P2P应用软件KuGoo2008为例进行分析,采用DPI原理,剖析KuGoo音乐工具网络流量的特征,分析提取出该流量的指纹信息,并提出一种优化的P2P流量识别方案,设计一个基于DPI技术的P2P流量监控系统。该监控系统旨在检测并控制网络P2P流量,释放网络带宽,优化网络环境。

With the development of Internet and Broadband technology,P2P is used wider and wider.However,The development of P2P applications has led to a lot of problems,such as accused of copyright laws,spreading Trojan horses and virus,occupying most Bandwidth resources and causing the environmental of network be much worse.Nowadays,the problems caused by P2P has become a key issues of the problems of network.How to solve these problems caused by P2P and control the P2P traffic effectively,have become a high preferential issues for many Network operators and corporation.The traditional fixed port couldn＇t precisely detect the P2P flow rate,while as a relatively simple and highly efficient data flow detection technology,DPI is utilized in P2P flow monitoring control,greatly promoting identify efficiency and accuracy of the protocol.Take KuGoo2008 as an example,adopting DPI principle,I analyze the correspondence mechanism and parse the fingerprint characteristic of KuGoo protocol.Finally,I propose an optimized design of P2P Detection System which is on the purpose of examining and detecting P2P traffic.P2P Detection System will release network band width and alleviate pressure on the network.