IP protocol identification method using the pattern match and check sum
Liu Cong-feng · Journal of Xidian University · 2012
In order to reduce the probability of report mistakes and pretermission which is likely to happen,and to improve the nicety of explicating application-level protocols in an intrusion detection system,a method is proposed to identify the IP protocol using the pattern match algorithm and IP header check sum calculation for Ethernet data packs.Firstly,Ethernet data packs are matched with some static characters of the IP header in the proposed method,and then IP protocol check sum calculation is done.As a result,whether the type that the data packs belong to is IP protocol or not can be identified finally.Under the Visual C++software condition,simulations prove the validity and reliability of the proposed method by running the simulated programme based on the data swatch which has been listed.And so the correctness of identifying upper protocols in the future is able to be ensured.