Research on Application Flow Error Based on DPI
Zhu Xiao-la · Computer & Network · 2015
In the process of the Deep Packet Inspection(Deep Packet Inspection, DPI) test, it is found that some application can be identified according to the knowledge base, but the flow of application is not complete, and the statistic result of actual application flow is different from that of real flow. How to precisely calculate the application flow is an important problem. Aiming at this problem, this paper presents three solutions such as searching common character of all messages in application session, adding peer learning in rules and recording IP and port number of application session as well as session aging mechanism. The experiment results show that the optimal solution is to adopt session aging mechanism, and use peer learning and searching common features of all messages in session as assistance.