家庭网络后台流量分析与识别

Analysis and Identification of Background Traffic Types in Home Networks

随着移动通信业的快速发展和人们对信息获取需求的日益强烈,家庭环境中接入网络的设备日益增多,在带宽有限的前提下网络过载和拥塞就变得难以避免。文章针对家庭用户中最常用的几类应用,用抓包软件Wireshark对这几类应用进行定时重复抓包,分析总结抓包结果得到各类应用的基本特征;采用入侵检测系统Snort对网络流量进行实时监控,识别目前网络上用户正在进行的应用;最后将识别功能拓展到家庭网关,通过Socket编程,实现家庭网关和后台的信息交流。实验结果表明,该方法能够对家庭成员的网络活动进行较为准确的识别。

With the rapid development of mobile communication industry, people＇s demand for information is becoming stronger. Since the number of equipments connected to network continues to grow, network overload and congestion have become unavoidable problems under the premise of limited bandwidth.This paper chooses some most commonly used applications to capture their network flow with Wireshark, and comes to several basic characteristics by analyzing and summarizing the experimental results. What’s more, it uses Snort, an intrusion detection system, to monitor the network lfow in real time and identify each application in progress from al family members. In the end, it extends recognition function to gateway, which wil be able to exchange information with background by Socket. The experimental result shows that with the method proposed in this paper network activities of family members wil be identiifed accurately.