A LAN P2P flow identification system based on Snort
Ruwei Chen · Electronic Design Engineering · 2011
Aiming at the high bandwidth assumption of P2P(peer to peer) flow,a LAN P2P flow identification system is designed based on Rule-matching and chain structure of IDS Snort.Two main traditional methods,port identification and feature matching are synthetically used in this system.In order to increase the rule-matching speed effectively,a dynamic mechanism is applied.By a chain of the option index,the sequence of rule-matching is adjusted dynamically.The experimental results indicate that this system can rapidly discover and further accurately alarm the different P2P flow.