Deep Packet Inspection using Snort
Saad Hafeez · UVic’s Research and Learning Repository (University of Victoria) · 2016
Internet traffic analysis is of key interest to network designers, as efficient analysis leads to more efficient and fault-tolerant networks. Internet traffic can be analysed in different ways to perform tasks such as classification and filtration. Deep packet inspection is a means of filtering network traffic by monitoring a stream of packets and identifying strings of data that appear common. Based on information contained in the packet headers, or other protocol-specific parameters, we can distinguish the application of origin and even requests made by the application. In this report, Snort is used as a tool for deep packet inspection. Network traffic can be analysed by creating rules for web applications using Snort. Further, different policies can be implemented on Snort for deep packet inspection.