P2P流快速识别技术

Technology of rapid P2P stream identification

摘要:

P2P软件在网络中应用广泛，如何快速有效地识别P2P数据流成为十分重要的问题。传统的P2P识别方法对当前P2P动态端口以及内容加密无能为力。文章根据P2P流包括IP包数目、UDP比例以及连接数指标等动态行为特征，结合数据挖掘分类算法，提出了一种基于距离判决函数的判决算法，并对该算法进行实验验证。实验证明这种算法能对数据流进行高效的判决和预测。通过该方法，对网络中用户使用P2P软件可以进行有效的快速识别，达到对P2P监控的目的。

Abstract:

P2P software is widely used in networks．It is a very important issue that how to identify P2P data flows fast and effectively. The traditional P2P identification methods are not suitable to widely applied dynamic port and the content encryption. Combining with data mining classification, this paper proposes a new decision algorithm based on distance decision function according to the dynamic characteristics of P2P flows, including IP packets numbers，percent of UDP and link-numbers. The experiment results show that P2P data flows can be identified and predicated quickly and effectively using this algorithm, therefore P2P flows can be monitored.