CN100466549C - 一种基于SIP协议过程特征识别VoIP流量的方法 - Google Patents

一种基于SIP协议过程特征识别VoIP流量的方法 Download PDF

Info

Publication number
CN100466549C
CN100466549C CNB2006101126996A CN200610112699A CN100466549C CN 100466549 C CN100466549 C CN 100466549C CN B2006101126996 A CNB2006101126996 A CN B2006101126996A CN 200610112699 A CN200610112699 A CN 200610112699A CN 100466549 C CN100466549 C CN 100466549C
Authority
CN
China
Prior art keywords
sip
session
data flow
packet
invite
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CNB2006101126996A
Other languages
English (en)
Other versions
CN1913456A (zh
Inventor
陈敏
张广兴
李士达
杨建华
谢高岗
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
G Cloud Technology Co Ltd
Original Assignee
Institute of Computing Technology of CAS
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Institute of Computing Technology of CAS filed Critical Institute of Computing Technology of CAS
Priority to CNB2006101126996A priority Critical patent/CN100466549C/zh
Publication of CN1913456A publication Critical patent/CN1913456A/zh
Application granted granted Critical
Publication of CN100466549C publication Critical patent/CN100466549C/zh
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/10—Architectures or entities
    • H04L65/102—Gateways
    • H04L65/1043—Gateway controllers, e.g. media gateway control protocol [MGCP] controllers
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/305—Authentication, i.e. establishing the identity or authorisation of security principals by remotely controlling device operation
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/74—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information operating in dual or compartmented mode, i.e. at least one secure mode
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/88—Detecting or preventing theft or loss
    • G—PHYSICS
    • G11—INFORMATION STORAGE
    • G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/10—Digital recording or reproducing
    • G11B20/10009—Improvement or modification of read or write signals
    • G—PHYSICS
    • G11—INFORMATION STORAGE
    • G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/10—Digital recording or reproducing
    • G11B20/10009—Improvement or modification of read or write signals
    • G11B20/10305—Improvement or modification of read or write signals signal quality assessment
    • G11B20/10398—Improvement or modification of read or write signals signal quality assessment jitter, timing deviations or phase and frequency errors
    • G11B20/10425—Improvement or modification of read or write signals signal quality assessment jitter, timing deviations or phase and frequency errors by counting out-of-lock events of a PLL
    • H—ELECTRICITY
    • H03—ELECTRONIC CIRCUITRY
    • H03L—AUTOMATIC CONTROL, STARTING, SYNCHRONISATION OR STABILISATION OF GENERATORS OF ELECTRONIC OSCILLATIONS OR PULSES
    • H03L7/00—Automatic control of frequency or phase; Synchronisation
    • H03L7/06—Automatic control of frequency or phase; Synchronisation using a reference signal applied to a frequency- or phase-locked loop
    • H03L7/08—Details of the phase-locked loop
    • H03L7/085—Details of the phase-locked loop concerning mainly the frequency- or phase-detection arrangement including the filtering or amplification of its output signal
    • H03L7/091—Details of the phase-locked loop concerning mainly the frequency- or phase-detection arrangement including the filtering or amplification of its output signal the phase or frequency detector using a sampling device
    • H—ELECTRICITY
    • H03—ELECTRONIC CIRCUITRY
    • H03M—CODING; DECODING; CODE CONVERSION IN GENERAL
    • H03M13/00—Coding, decoding or code conversion, for error detection or error correction; Coding theory basic assumptions; Coding bounds; Error probability evaluation methods; Channel models; Simulation or testing of codes
    • H03M13/03—Error detection or forward error correction by redundancy in data representation, i.e. code words containing more digits than the source words
    • H03M13/23—Error detection or forward error correction by redundancy in data representation, i.e. code words containing more digits than the source words using convolutional codes, e.g. unit memory codes
    • H—ELECTRICITY
    • H03—ELECTRONIC CIRCUITRY
    • H03M—CODING; DECODING; CODE CONVERSION IN GENERAL
    • H03M13/00—Coding, decoding or code conversion, for error detection or error correction; Coding theory basic assumptions; Coding bounds; Error probability evaluation methods; Channel models; Simulation or testing of codes
    • H03M13/29—Coding, decoding or code conversion, for error detection or error correction; Coding theory basic assumptions; Coding bounds; Error probability evaluation methods; Channel models; Simulation or testing of codes combining two or more codes or code structures, e.g. product codes, generalised product codes, concatenated codes, inner and outer codes
    • H03M13/2903—Methods and arrangements specifically for encoding, e.g. parallel encoding of a plurality of constituent codes
    • H—ELECTRICITY
    • H03—ELECTRONIC CIRCUITRY
    • H03M—CODING; DECODING; CODE CONVERSION IN GENERAL
    • H03M13/00—Coding, decoding or code conversion, for error detection or error correction; Coding theory basic assumptions; Coding bounds; Error probability evaluation methods; Channel models; Simulation or testing of codes
    • H03M13/29—Coding, decoding or code conversion, for error detection or error correction; Coding theory basic assumptions; Coding bounds; Error probability evaluation methods; Channel models; Simulation or testing of codes combining two or more codes or code structures, e.g. product codes, generalised product codes, concatenated codes, inner and outer codes
    • H03M13/2957—Turbo codes and decoding
    • H03M13/2993—Implementing the return to a predetermined state, i.e. trellis termination
    • H—ELECTRICITY
    • H03—ELECTRONIC CIRCUITRY
    • H03M—CODING; DECODING; CODE CONVERSION IN GENERAL
    • H03M13/00—Coding, decoding or code conversion, for error detection or error correction; Coding theory basic assumptions; Coding bounds; Error probability evaluation methods; Channel models; Simulation or testing of codes
    • H03M13/63—Joint error correction and other techniques
    • H03M13/635—Error control coding in combination with rate matching
    • H03M13/6356—Error control coding in combination with rate matching by repetition or insertion of dummy data, i.e. rate reduction
    • H—ELECTRICITY
    • H03—ELECTRONIC CIRCUITRY
    • H03M—CODING; DECODING; CODE CONVERSION IN GENERAL
    • H03M13/00—Coding, decoding or code conversion, for error detection or error correction; Coding theory basic assumptions; Coding bounds; Error probability evaluation methods; Channel models; Simulation or testing of codes
    • H03M13/63—Joint error correction and other techniques
    • H03M13/635—Error control coding in combination with rate matching
    • H03M13/6362—Error control coding in combination with rate matching by puncturing
    • H—ELECTRICITY
    • H03—ELECTRONIC CIRCUITRY
    • H03M—CODING; DECODING; CODE CONVERSION IN GENERAL
    • H03M7/00—Conversion of a code where information is represented by a given sequence or number of digits to a code where the same, similar or subset of information is represented by a different sequence or number of digits
    • H03M7/30—Compression; Expansion; Suppression of unnecessary data, e.g. redundancy reduction
    • H03M7/40—Conversion to or from variable length codes, e.g. Shannon-Fano code, Huffman code, Morse code
    • H03M7/4006—Conversion to or from arithmetic code
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04B—TRANSMISSION
    • H04B10/00—Transmission systems employing electromagnetic waves other than radio-waves, e.g. infrared, visible or ultraviolet light, or employing corpuscular radiation, e.g. quantum communication
    • H04B10/25—Arrangements specific to fibre transmission
    • H04B10/2575—Radio-over-fibre, e.g. radio frequency signal modulated onto an optical carrier
    • H04B10/25752—Optical arrangements for wireless networks
    • H04B10/25753—Distribution optical network, e.g. between a base station and a plurality of remote units
    • H04B10/25754—Star network topology
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04B—TRANSMISSION
    • H04B7/00—Radio transmission systems, i.e. using radiation field
    • H04B7/24—Radio transmission systems, i.e. using radiation field for communication between two or more posts
    • H04B7/26—Radio transmission systems, i.e. using radiation field for communication between two or more posts at least one of which is mobile
    • H04B7/2628—Radio transmission systems, i.e. using radiation field for communication between two or more posts at least one of which is mobile using code-division multiple access [CDMA] or spread spectrum multiple access [SSMA]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04J—MULTIPLEX COMMUNICATION
    • H04J13/00—Code division multiplex systems
    • H04J13/0077—Multicode, e.g. multiple codes assigned to one user
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04J—MULTIPLEX COMMUNICATION
    • H04J13/00—Code division multiplex systems
    • H04J13/16—Code allocation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L1/00—Arrangements for detecting or preventing errors in the information received
    • H04L1/004—Arrangements for detecting or preventing errors in the information received by using forward error control
    • H04L1/0056—Systems characterized by the type of code used
    • H04L1/0064—Concatenated codes
    • H04L1/0066—Parallel concatenated codes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L1/00—Arrangements for detecting or preventing errors in the information received
    • H04L1/004—Arrangements for detecting or preventing errors in the information received by using forward error control
    • H04L1/0056—Systems characterized by the type of code used
    • H04L1/0067—Rate matching
    • H04L1/0068—Rate matching by puncturing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L25/00—Baseband systems
    • H04L25/02—Details ; arrangements for supplying electrical power along data transmission lines
    • H04L25/03—Shaping networks in transmitter or receiver, e.g. adaptive shaping networks
    • H04L25/03006—Arrangements for removing intersymbol interference
    • H04L25/03012—Arrangements for removing intersymbol interference operating in the time domain
    • H04L25/03019—Arrangements for removing intersymbol interference operating in the time domain adaptive, i.e. capable of adjustment during data reception
    • H04L25/03038—Arrangements for removing intersymbol interference operating in the time domain adaptive, i.e. capable of adjustment during data reception with a non-recursive structure
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L25/00—Baseband systems
    • H04L25/38—Synchronous or start-stop systems, e.g. for Baudot code
    • H04L25/40—Transmitting circuits; Receiving circuits
    • H04L25/49—Transmitting circuits; Receiving circuits using code conversion at the transmitter; using predistortion; using insertion of idle bits for obtaining a desired frequency spectrum; using three or more amplitude levels ; Baseband coding techniques specific to data transmission systems
    • H04L25/497—Transmitting circuits; Receiving circuits using code conversion at the transmitter; using predistortion; using insertion of idle bits for obtaining a desired frequency spectrum; using three or more amplitude levels ; Baseband coding techniques specific to data transmission systems by correlative coding, e.g. partial response coding or echo modulation coding transmitters and receivers for partial response systems
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/48—Message addressing, e.g. address format or anonymous messages, aliases
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/58—Message adaptation for wireless communication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/12—Applying verification of the received information
    • H04L63/126—Applying verification of the received information the source of the received data
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/1066—Session management
    • H04L65/1101—Session protocols
    • H04L65/1104—Session initiation protocol [SIP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/085—Secret sharing or secret splitting, e.g. threshold schemes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/30—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
    • H04L9/304—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy based on error correction codes, e.g. McEliece
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M1/00—Substation equipment, e.g. for use by subscribers
    • H04M1/72—Mobile telephones; Cordless telephones, i.e. devices for establishing wireless links to base stations without route selection
    • H04M1/724—User interfaces specially adapted for cordless or mobile telephones
    • H04M1/72403—User interfaces specially adapted for cordless or mobile telephones with means for local support of applications that increase the functionality
    • H04M1/72409—User interfaces specially adapted for cordless or mobile telephones with means for local support of applications that increase the functionality by interfacing with external accessories
    • H04M1/72415—User interfaces specially adapted for cordless or mobile telephones with means for local support of applications that increase the functionality by interfacing with external accessories for remote control of appliances
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M7/00—Arrangements for interconnection between switching centres
    • H04M7/12—Arrangements for interconnection between switching centres for working between exchanges having different types of switching equipment, e.g. power-driven and step by step or decimal and non-decimal
    • H04M7/1205—Arrangements for interconnection between switching centres for working between exchanges having different types of switching equipment, e.g. power-driven and step by step or decimal and non-decimal where the types of switching equipement comprises PSTN/ISDN equipment and switching equipment of networks other than PSTN/ISDN, e.g. Internet Protocol networks
    • H04M7/1295—Details of dual tone multiple frequency signalling
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N19/00—Methods or arrangements for coding, decoding, compressing or decompressing digital video signals
    • H04N19/10—Methods or arrangements for coding, decoding, compressing or decompressing digital video signals using adaptive coding
    • H04N19/102—Methods or arrangements for coding, decoding, compressing or decompressing digital video signals using adaptive coding characterised by the element, parameter or selection affected or controlled by the adaptive coding
    • H04N19/103—Selection of coding mode or of prediction mode
    • H04N19/109—Selection of coding mode or of prediction mode among a plurality of temporal predictive coding modes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N19/00—Methods or arrangements for coding, decoding, compressing or decompressing digital video signals
    • H04N19/10—Methods or arrangements for coding, decoding, compressing or decompressing digital video signals using adaptive coding
    • H04N19/134—Methods or arrangements for coding, decoding, compressing or decompressing digital video signals using adaptive coding characterised by the element, parameter or criterion affecting or controlling the adaptive coding
    • H04N19/136—Incoming video signal characteristics or properties
    • H04N19/137—Motion inside a coding unit, e.g. average field, frame or block difference
    • H04N19/139—Analysis of motion vectors, e.g. their magnitude, direction, variance or reliability
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N19/00—Methods or arrangements for coding, decoding, compressing or decompressing digital video signals
    • H04N19/60—Methods or arrangements for coding, decoding, compressing or decompressing digital video signals using transform coding
    • H04N19/625—Methods or arrangements for coding, decoding, compressing or decompressing digital video signals using transform coding using discrete cosine transform [DCT]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N19/00—Methods or arrangements for coding, decoding, compressing or decompressing digital video signals
    • H04N19/90—Methods or arrangements for coding, decoding, compressing or decompressing digital video signals using coding techniques not provided for in groups H04N19/10-H04N19/85, e.g. fractals
    • H04N19/91—Entropy coding, e.g. variable length coding [VLC] or arithmetic coding
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/12—Messaging; Mailboxes; Announcements
    • H04W4/14—Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W52/00—Power management, e.g. TPC [Transmission Power Control], power saving or power classes
    • H04W52/04—TPC
    • H04W52/30—TPC using constraints in the total amount of available transmission power
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup
    • H04W76/12—Setup of transport tunnels
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2105—Dual mode as a secondary aspect
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2115—Third party
    • G—PHYSICS
    • G11—INFORMATION STORAGE
    • G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/22—Signal processing not specific to the method of recording or reproducing; Circuits therefor for reducing distortions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/04—Real-time or near real-time messaging, e.g. instant messaging [IM]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/10—Architectures or entities
    • H04L65/1016—IP multimedia subsystem [IMS]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M3/00—Automatic or semi-automatic exchanges
    • H04M3/42—Systems providing special services or facilities to subscribers
    • H04M3/42221—Conversation recording systems
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/12—Messaging; Mailboxes; Announcements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W72/00—Local resource management
    • H04W72/20—Control channels or signalling for resource management
    • H04W72/23—Control channels or signalling for resource management in the downlink direction of a wireless link, i.e. towards a terminal
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/22—Processing or transfer of terminal data, e.g. status or physical capabilities
    • H04W8/24—Transfer of terminal data
    • H04W8/245—Transfer of terminal data from a network towards a terminal
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/26—Network addressing or numbering for mobility support
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
    • H04W88/08—Access point devices
    • H04W88/085—Access point devices with remote components
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
    • Y10S—TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10S370/00—Multiplex communications
    • Y10S370/901—Wide area network
    • Y10S370/902—Packet switching
    • Y10S370/903—Osi compliant network
    • Y10S370/906—Fiber data distribution interface, FDDI
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
    • Y10S—TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10S370/00—Multiplex communications
    • Y10S370/901—Wide area network
    • Y10S370/902—Packet switching
    • Y10S370/903—Osi compliant network
    • Y10S370/907—Synchronous optical network, SONET

Landscapes

  • Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Multimedia (AREA)
  • Computer Hardware Design (AREA)
  • Probability & Statistics with Applications (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Computing Systems (AREA)
  • Power Engineering (AREA)
  • Spectroscopy & Molecular Physics (AREA)
  • Mathematical Physics (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Discrete Mathematics (AREA)
  • Electromagnetism (AREA)
  • Business, Economics & Management (AREA)
  • General Business, Economics & Management (AREA)
  • Human Computer Interaction (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本发明公开了一种基于SIP协议过程特征识别VOIP流量的方法，该方法包括：A、通过关键字匹配和建立对请求报文和应答报文的识别规则识别SIP控制会话中数据包；B、通过对已确定的与控制会话相关的数据包中的关键字特征进行分析，提取出将要产生的动态会话流的判断信息，对语音通信会话过程中与动态会话相关的数据包进行识别，实现对基于SIP的VOIP流量的完整识别。利用本发明，对VOIP流量的识别率高，采用的方法体现了流之间的依赖关系，对进一步分析SIP通讯会话等功能提供了强有力的保障。

Description

一种基于SIP协议过程特征识别VoIP流量的方法
技术领域
本发明涉及计算机网络流量监测、流量整形、流量控制和网络服务质量(QoS)及网络性能分析技术领域，尤其涉及一种基于会话发起协议(SIP)过程特征识别VoIP(Voice Over Internet Protocol，网络电话或网络电话协议，指的是将模拟的声音讯号经过压缩与封包之后，以数据封包的形式在IP网络的环境进行语音讯号的传输，通俗来说也就是互联网电话、网络电话或者简称IP电话的意思)流量的方法。
背景技术
应用层流量识别是分析网络承载各应用层业务的流量构成、分布和变化规律、了解业务性能、定位网络瓶颈、保障关键业务的QoS等的重要前提条件之一。
随着技术的进步和Internet带宽的增加，网络上多媒体应用越来越普遍，人们对网络依赖日益严重，流媒体、VoIP、视频会议等多媒体新业务流量越来越大。
VoIP是这些新出现的网络业务中较为重要的应用。由于SIP协议是一个基于文本的Internet协议，借鉴了HTTP、SMTP等协议的优点，在风格上遵循因特网一贯坚持的简练、开放、兼容和可扩展等原则，实现简单，目前VoIP应用很多是采用了基于SIP协议的实现。
现有的流量识别方法，按照是否对协议载荷进行分析，即分析信息是否涉及到数据包中传输层以上的信息，可分为载荷分析(payload-basedanalysis)和非载荷分析；按照识别所依据信息的不同可分为基于端口的流量识别、基于特征(如关键字、特征字符串系列等)的流量识别和基于协议过程分析的识别方法。
但是，因为VoIP是在近年来才得到了相对广泛的应用，对VoIP流量识别的研究相对较少，并且现有的一些相关的应用层流量识别方法大多是侧重于粗粒度流量分类，偏重于理论分析。由于SIP协议本身所具备的特点，这些理论化的识别/分类方法在对基于SIP协议的VoIP流量的识别的准确度、可扩展性、时效性尤其实用性等方面还存在着不同层次上的问题。
比如，基于SIP的VoIP数据流并不采用固定的端口号，而是在会话请求过程和应答过程中通过协商来确定应用动态的端口号；基于SIP协议的VoIP数据流内容的特征不容易被发现等等。这些使得若针对具体的VoIP业务提供QoS保障现有的粗粒度分类方法不能满足细化的业务区分的要。
另外，由于在VoIP会话***中，SIP数据流并不是从始至终一直存在的，一般来讲是由于SIP控制流在其净载荷中指定产生的，这样传统的的端口识别等方法并不适合于对SIP数据流的持续时间等参数的进一步获取。
综上，有必要设计一种新的、实用的基于SIP协议的VoIP流量的识别方法对日益普遍的VoIP应用进行准确高效的识别以便于实现面向应用层业务的流量监测、分析、控制和QoS保障等。
发明内容
(一)要解决的技术问题
针对上述现有技术存在的不足，本发明的主要目的在于提供一种基于SIP协议过程特征识别VoIP流量的方法，以实现针对SIP流量的识别，特别是针对SIP产生的数据流的识别。
(二)技术方案
为达到上述目的，本发明的技术方案是这样实现的：
一种基于SIP协议过程特征识别VoIP流量的方法，该方法包括：
A、通过关键字匹配来建立对SIP协议的请求报文和应答报文的识别规则，识别SIP协议中与控制会话相关的数据包；
B、通过分析与控制会话相关的数据包中的关键字特征，提取出将要产生的动态会话流的判断信息，对语音通信会话过程中与动态会话相关的数据包进行识别，实现对基于SIP的VoIP流量的完整识别，具体包括：
B1、定义关键字＂200＂、＂CSeq：＂、＂c＝＂、＂m＝＂，对与控制会话相关的数据包中的关键字特征进行检索定位，对SIP协议中定义的数据流的标志进行提取，提取出将要产生的动态会话流的判断信息；
B2、建立一个SIP数据流会话列表，以判断是否产生了SIP协议中规定数据流。
上述方案中，步骤A中所述建立对SIP协议的请求报文和应答报文的识别规则中，与请求报文相关的识别规则为：SIP数据包中的净载荷第一行以“invite”、“register”、“cancel”、“Options”、“Register”、ACK”关键字开始，紧随其后包含一个空格、“SIP”关键字和其他除空格外的任意字符，随后包含下一个空格，空格之后包含“SIP/”关键字和“数字.数字”；该识别规则的正则表达式为：(invite|register|cancel|OptionsIRegister|ACK)sip[\x09-\x0d-～]*sip/[0-2]\.[0-9]。
上述方案中，步骤A中所述建立对请求报文和应答报文的识别规则中，与应答报文相关的识别规则为：SIP数据包中的净载荷第一行以“SIP/”关键字开始，紧随其后包含“数字.数字”、空格、3位数字、空格、空格外的任意字符；此处，3位数字为大于100而未超过599的数字，对应识别规则中的“[1-5][0-9][0-9]”；空格外的任意字符对应标识“*”；该识别规则的正则表达式为：sip/[0-2]\.[0-9][1-5][0-9][0-9][a-zA-Z]*。
上述方案中，所述步骤B1包括：
B10、定义关键字＂200＂、＂CSeq：＂、＂c＝＂、＂m＝＂，对与控制会话相关的数据包中的关键字特征进行检索定位，判断数据包的后续内容中是否存在＂200＂标志，如果存在，则执行步骤B11；否则，结束该流程；
B11、判断数据包的后续内容中是否存在＂CSeq：＂标志，如果存在，则执行步骤B12；否则，结束该流程；
B12、查找数据包中下一个空格，如果查找到，则执行步骤B13；否则，结束该流程；
B13、判断数据包后续内容中6个字符是否是＂INVITE＂字符串，如果是，则执行步骤B14；否则，结束该流程；
B14、查找数据包内容是否包括＂c＝＂字符串，如果是，则执行步骤B15；否则，结束该流程；
B15、将上述查找到＂c＝＂字符串的位置后移7个字节，提取IP地址，并用invite_ip表示；
B16、查找数据包后续内容是否包括＂m＝＂字符串，如果是，执行步骤B17；否则，结束该流程；
B17、查找数据包后续内容中第一个空格，如果查找到，则转向步骤B18；否则，结束该流程；
B18、在此数据包提取指定的数据流的端口号和数据流所支持的媒体流格式，该数据流所支持的媒体流格式用invite_proto表示；
B19、根据提取的媒体流格式判断出媒体流所采用的协议类型。
上述方案中，所述步骤B2包括：
B20、判断SIP数据流会话表中是否存在所述数据包归属的数据流，此处的数据流不同于B21中的SIP数据流，SIP数据流是数据流的一种，其表示与SIP协议相关的数据流，如果存在，则执行步骤B21；否则，执行步骤B24；
B21、根据查找到的SIP会话的invite_ip、invite_port值，步骤B15中确定的IP地址，步骤B18中确定的数据流的端口号和数据流所支持的媒体流格式，创建SIP数据流；
B22、判断SIP数据流所支持的媒体流格式是否为＂RTP/AVP＂，如果是，执行步骤B23；否则，执行步骤B25；
B23、根据步骤B20中查找到的SIP会话的invite_ip、invite_port+1值，步骤B15中确定的IP地址，步骤B18中确定的数据流的端口号加1值，创建SIP数据流；
B24、根据所述数据包归属的数据流、步骤B20中查找到的SIP会话的invite_ip、invite_proto，步骤B18中确定的invite_proto，创建一个新的会话并将其***到会话表中；
B25、在SIP会话表中删除步骤B21或步骤B23中所创建的SIP数据流，结束该流程。
(三)有益效果
从上述技术方案可以看出，本发明具有以下有益效果：
1、识别率高。因为传统的流量识别方法基于端口，特征字或者时间，并不能较好的识别SIP数据流。
2、本发明采用的方法体现了流之间的依赖关系，对进一步分析SIP通讯会话等功能提供了强有力的保障。
附图说明
图1为本发明提供的基于SIP协议过程特征识别VoIP流量总体技术方案的实现流程图；
图2为本发明实施例中提供的基于SIP协议过程特征识别VoIP流量的方法流程图。
具体实施方式
为使本发明的目的、技术方案和优点更加清楚明白，以下结合具体实施例，并参照附图，对本发明进一步详细说明。
如图1所示，图1为本发明提供的基于SIP协议过程特征识别VoIP流量总体技术方案的实现流程图，该方法包括以下步骤：
步骤101：通过关键字匹配来建立对SIP协议的请求报文和应答报文的识别规则，识别SIP协议中与控制会话相关的数据包；
步骤102：通过分析与控制会话相关的数据包中的关键字特征，提取出将要产生的动态会话流的判断信息，对语音通信会话过程中与动态会话相关的数据包进行识别，实现对基于SIP的VoIP流量的完整识别。
上述步骤101中，提出并应用了如下对SIP请求报文和应答报文的识别规则，即：
对于请求报文，其报文格式为：
#Request-Line ＝ Method SP Request-URI SP SIP-Version CRLF
即：请求方法请求URI SIP协议版本号回车换行符
基于此，本发明对于请求报文有如下识别规则：(invite|register|cancel|Options|Register|ACK)sip[\x09-\x0d-～]*sip/[0-2]\.[0-9]
上述识别规则的具体文字表述为：SIP数据包中的净载荷第一行必须以“invite”、“register”、“cancel”、“Options”、“Register”、ACK”关键字开始，紧随其后包含一个空格、“SIP”关键字和其他除空格外的任意字符，随后包含下一个空格，空格之后包含“SIP/”关键字和“数字.数字”；
对于应答报文，其报文格式为：
#Status-Line＝ SIP-Version SP Status-Code SP Reason-Phrase CRLF
即：SIP协议版本号应答码应答码原因说明回车换行符
基于此，本发明对于应答报文有如下识别规则：
sip/[0-2]\.[0-9][1-5][0-9][0-9][a-zA-Z]*
上述识别应答报文规则的具体文字表述为：SIP数据包中的净载荷第一行必须以“SIP/”关键字开始，紧随其后包含“数字.数字”、空格、3位数字、空格、空格外的任意字符。
上述步骤102进一步包括：
步骤1021：定义关键字＂200＂、＂CSeq：＂、＂c＝＂、＂m＝＂，对与控制会话相关的数据包中的关键字特征进行检索定位，对SIP协议中规定数据流的标志进行提取，提取出将要产生的动态会话流的判断信息；
步骤1022：建立一个SIP数据流会话列表，判断是否产生了SIP协议中规定数据流。
基于图1所述的基于SIP协议过程特征识别VoIP流量总体技术方案的实现流程图，以下结合具体的实施例对本发明提供的基于SIP协议过程特征识别VoIP流量的方法进一步详细说明。
如图2所示，图2为本发明实施例中提供的基于SIP协议过程特征识别VoIP流量的方法流程图，该方法包括以下步骤：
步骤201：判断数据包是否为SIP数据包，如果是，则执行步骤202；否则，执行步骤222；
步骤202：判断数据包是否已经属于某条SIP控制流，如果是转向204，否则执行步骤203；
步骤203：根据数据包的五元组标志来创建SIP控制流；执行步骤204；
步骤204：判断数据包的净载荷前7个字符是否为＂INVITE＂关键字，如果是，执行步骤210；否则，执行步骤205；
步骤205：判断数据包的净载荷是否以＂SIP/＂关键字开始，如果是，则执行步骤206，否则执行步骤222；
步骤206：定义关键字＂200＂、＂CSeq：＂、＂c＝＂、＂m＝＂，对已经确定的与控制会话相关的数据包中的关键字特征进行检索定位，判断数据包的后续内容中是否存在＂200＂标志，如果存在，则执行步骤207；否则，执行步骤222；
步骤207：判断数据包的后续内容中是否存在＂CSeq：＂标志，如果存在，则进行步骤208；否则，执行步骤222；
步骤208：查找数据包中下一个空格，如果查找到，则执行步骤209；否则，执行步骤222；
步骤209：判断数据包后续内容中6个字符是否是＂INVITE＂字符串，如果是，则执行步骤210，否则执行步骤222；
步骤210：查找数据包内容是否包括＂c＝＂字符串，如果是，则执行步骤211；否则，执行步骤222；
步骤211：将上述查找到＂c＝＂字符串的位置后移7个字节，提取IP地址，执行步骤212；
步骤212：查找数据包后续内容是否包括＂m＝＂字符串，如果是，则执行步骤213；否则，执行步骤222；
步骤213：查找数据包后续内容中第一个空格，如果查找到，则执行步骤214；否则，执行步骤222；
步骤214：在此数据包提取指定的数据流的端口号和数据流所支持的媒体流格式；执行步骤215；
步骤215：根据步骤214中所得到的媒体流格式判断出媒体流所采用的协议类型；
步骤216：判断由步骤202或步骤203中确定的数据流是否存在于SIP会话表中，如果存在，则执行步骤217；否则，执行步骤220；
步骤217：根据步骤216中查找到的SIP会话的invite_ip、invite_port值、步骤211中确定的IP地址、步骤214中确定的数据流的端口号和数据流所支持的媒体流格式，创建SIP数据流；
步骤218：判断SIP数据流对应的数据流所支持的媒体流格式是否为＂RTP/AVP＂，如果是，执行步骤219；否则，执行步骤221；
步骤219：根据步骤216中查找到的SIP会话的invite_ip、invite_port+1值、步骤中确定的IP地址、步骤中确定的数据流的端口号加1值来创建SIP数据流；执行步骤221；
步骤220：根据由步骤202或步骤203中确定的数据流、步骤216中查找到的SIP会话的invite_ip、invite_proto、步骤214中确定的invite_proto来创建一个会话并将其***到会话表中；执行步骤221；
步骤221：在SIP会话表中删除步骤217或步骤219中所创建的SIP数据流；执行步骤222；
步骤222：返回步骤201，处理下一个数据包。
以上所述的具体实施例，对本发明的目的、技术方案和有益效果进行了进一步详细说明，所应理解的是，以上所述仅为本发明的具体实施例而已，并不用于限制本发明，凡在本发明的精神和原则之内，所做的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。

Claims (5)

1、一种基于会话发起协议SIP过程特征识别网络电话VoIP流量的方法，其特征在于，该方法包括：
A、通过关键字匹配来建立对SIP协议的请求报文和应答报文的识别规则，识别SIP协议中与控制会话相关的数据包；
B、通过分析与控制会话相关的数据包中的关键字特征，提取出将要产生的动态会话流的判断信息，对语音通信会话过程中与动态会话相关的数据包进行识别，实现对基于SIP的VoIP流量的完整识别，具体包括：
B1、定义关键字＂200＂、＂CSeq:＂、＂c＝＂、＂m＝＂，对与控制会话相关的数据包中的关键字特征进行检索定位，对SIP协议中定义的数据流的标志进行提取，提取出将要产生的动态会话流的判断信息；
B2、建立一个SIP数据流会话列表，以判断是否产生了SIP协议中规定数据流。
2、根据权利要求1所述的基于SIP协议过程特征识别VoIP流量的方法，其特征在于，步骤A中所述建立对SIP协议的请求报文和应答报文的识别规则中，与请求报文相关的识别规则为：SIP数据包中的净载荷第一行以“invite”、“register”、“cancel”、“Options”、“Register”、ACK”关键字开始，紧随其后包含一个空格、“SIP”关键字和其他除空格外的任意字符，随后包含下一个空格，空格之后包含“SIP/”关键字和“数字.数字”；该识别规则的正则表达式为：(invite|register|cancel|Options|Register|ACK)sip[\x09-\x0d-～]*sip/[0-2]\.[0-9]。
3、根据权利要求1所述的基于SIP协议过程特征识别VoIP流量的方法，其特征在于，步骤A中所述建立对请求报文和应答报文的识别规则中，与应答报文相关的识别规则为：SIP数据包中的净载荷第一行以“SIP/”关键字开始，紧随其后包含“数字.数字”、空格、3位数字、空格、空格外的任意字符；此处，3位数字为大于100而未超过599的数字，对应识别规则中的“[1-5][0-9][0-9]”；空格外的任意字符对应标识“*”；该识别规则的正则表达式为：sip/[0-2]\.[0-9][1-5][0-9][0-9][a-zA-Z]*。
4、根据权利要求1所述的基于SIP协议过程特征识别VoIP流量的方法，其特征在于，所述步骤B1包括：
B10、定义关键字＂200＂、＂CSeq:＂、＂c＝＂、＂m＝＂，对与控制会话相关的数据包中的关键字特征进行检索定位，判断数据包的后续内容中是否存在＂200＂标志，如果存在，则执行步骤B11；否则，结束该流程；
B11、判断数据包的后续内容中是否存在＂CSeq:＂标志，如果存在，则执行步骤B12；否则，结束该流程；
B12、查找数据包中下一个空格，如果查找到，则执行步骤B13；否则，结束该流程；
B13、判断数据包后续内容中6个字符是否是＂INVITE＂字符串，如果是，则执行步骤B14；否则，结束该流程；
B14、查找数据包内容是否包括＂c＝＂字符串，如果是，则执行步骤B15；否则，结束该流程；
B15、将上述查找到＂c＝＂字符串的位置后移7个字节，提取IP地址，并用invite_ip表示；
B16、查找数据包后续内容是否包括＂m＝＂字符串，如果是，执行步骤B17；否则，结束该流程；
B17、查找数据包后续内容中第一个空格，如果查找到，则转向步骤B18；否则，结束该流程；
B18、在此数据包提取指定的数据流的端口号和数据流所支持的媒体流格式，该数据流所支持的媒体流格式用invite_proto表示；
B19、根据提取的媒体流格式判断出媒体流所采用的协议类型。
5、根据权利要求4所述的基于SIP协议过程特征识别VoIP流量的方法，其特征在于，所述步骤B2包括：
B20、判断SIP数据流会话表中是否存在所述数据包归属的数据流，此处的数据流不同于B21中的SIP数据流，SIP数据流是数据流的一种，其表示与SIP协议相关的数据流，如果存在，则执行步骤B21；否则，执行步骤B24；
B21、根据查找到的SIP会话的invite_ip、invite_port值，步骤B15中确定的IP地址，步骤B18中确定的数据流的端口号和数据流所支持的媒体流格式，创建SIP数据流；
B22、判断SIP数据流所支持的媒体流格式是否为＂RTP/AVP＂，如果是，执行步骤B23；否则，执行步骤B25；
B23、根据步骤B20中查找到的SIP会话的invite_ip、invite_port+1值，步骤中确定的IP地址，步骤B18中确定的数据流的端口号加1值，创建SIP数据流；
B24、根据所述数据包归属的数据流、步骤B20中查找到的SIP会话的invite_ip、invite_proto，步骤B18中确定的invite_proto，创建一个新的会话并将其***到会话表中；
B25、在SIP会话表中删除步骤B21或步骤B23中所创建的SIP数据流，结束该流程。
CNB2006101126996A 2006-08-30 2006-08-30 一种基于SIP协议过程特征识别VoIP流量的方法 Expired - Fee Related CN100466549C (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNB2006101126996A CN100466549C (zh) 2006-08-30 2006-08-30 一种基于SIP协议过程特征识别VoIP流量的方法

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB2006101126996A CN100466549C (zh) 2006-08-30 2006-08-30 一种基于SIP协议过程特征识别VoIP流量的方法

Publications (2)

Publication Number Publication Date
CN1913456A CN1913456A (zh) 2007-02-14
CN100466549C true CN100466549C (zh) 2009-03-04

Family

ID=37722235

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB2006101126996A Expired - Fee Related CN100466549C (zh) 2006-08-30 2006-08-30 一种基于SIP协议过程特征识别VoIP流量的方法

Country Status (1)

Country Link
CN (1) CN100466549C (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TWI650978B (zh) * 2018-03-21 2019-02-11 和碩聯合科技股份有限公司 封包辨識方法及封包辨識裝置

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101035111B (zh) * 2007-04-13 2010-10-13 北京启明星辰信息技术股份有限公司 一种智能协议解析方法及装置
CN100440819C (zh) * 2007-05-18 2008-12-03 清华大学 基于通话模型的网络语音通话测试流量生成方法
CN101383785B (zh) * 2008-10-24 2011-08-17 中国科学院计算技术研究所 一种面向sip应用的业务流管理方法
CN101547222B (zh) * 2009-05-14 2012-07-25 烽火通信科技股份有限公司 一种在VoIP网络中传输SIP请求历史信息的方法
CN102064994B (zh) * 2009-11-18 2013-12-18 中兴通讯股份有限公司 基于媒体网关控制协议识别网络电话流量的方法和装置
DE102013021157A1 (de) 2013-12-10 2015-06-25 Unify Gmbh & Co. Kg Verfahren und Telekommunikationsanordnung zum Übertragen von Mediendaten mit unterschiedlichen Medientypen über ein dienstgütesensitives Netzwerk

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1741504A (zh) * 2005-08-29 2006-03-01 杭州华为三康技术有限公司 基于应用的流量控制方法及进行应用流量控制的网络设备
CN1750488A (zh) * 2005-09-22 2006-03-22 广东省电信有限公司研究院 互联网网络电话的监控***及其监控方法

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1741504A (zh) * 2005-08-29 2006-03-01 杭州华为三康技术有限公司 基于应用的流量控制方法及进行应用流量控制的网络设备
CN1750488A (zh) * 2005-09-22 2006-03-22 广东省电信有限公司研究院 互联网网络电话的监控***及其监控方法

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
Accurate,Scalable In-Network Identification of P2P TrafficUsing Application Signature. Subhabrata Sen, Oliver Spatscheck, Dongmei Wang.In: Proc.of 13th international conference on WWW. New York, NY:2004. 2004 *
Transport Layer Identification of P2P Traffic. Karagiannis T, Broido A, Faloutsos M.In: Proc.of ACM SIGCOMM IMC.Taormina,Sicily,Italy:2004. 2004 *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TWI650978B (zh) * 2018-03-21 2019-02-11 和碩聯合科技股份有限公司 封包辨識方法及封包辨識裝置

Also Published As

Publication number Publication date
CN1913456A (zh) 2007-02-14

Similar Documents

Publication Publication Date Title
CN100466549C (zh) 一种基于SIP协议过程特征识别VoIP流量的方法
US8171146B2 (en) Utilization of media capabilities in a mixed environment
CN102882703B (zh) 一种基于http分析的url自动分类分级的***及方法
EP1924028B1 (en) Method and system for providing qos service
CN103281213A (zh) 一种网络流量内容提取和分析检索方法
CN103139315A (zh) 一种适用于家庭网关的应用层协议解析方法
CN102571946B (zh) 一种基于对等网络的协议识别与控制***的实现方法
US8228824B2 (en) VoIP contextual information processing
US8842660B2 (en) VoIP variable metadata
CN106789242A (zh) 一种基于手机客户端软件动态特征库的识别应用智能分析引擎
WO2010139237A1 (zh) 一种深度报文检测方法和装置
US7983247B2 (en) Metadata collection
US20220321611A1 (en) System and method of admission control of a communication session
CN102984402A (zh) 一种VoIP数据包的处理方法及***
CN101127690A (zh) 一种下一代网络业务流量识别方法
CN102904822A (zh) VoIP网络流量的层次化识别方法
CN101072174A (zh) 基于净荷深度检测和会话关联技术的腾讯语音识别方法
CN101321097A (zh) 基于净荷深度检测的腾讯网络直播业务识别方法
CN101631174B (zh) 基于会话发起协议的网络电话实时识别和过滤方法
CN110798461B (zh) 非对称路由网络下VoIP关联方法、装置及可读存储介质
CN101699802A (zh) 一种海量数据分流方法
CN101466088A (zh) 一种Java无线服务计费的***和实现方法
CN1146188C (zh) 因特网接入服务器的选择性计费方法
CN100401730C (zh) 使用媒体网关控制协议实现用户自定义录音的方法
CN1889584A (zh) 一种基于模板的抽象应用层业务行为回放方法

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
ASS Succession or assignment of patent right

Owner name: G-CLOUD TECHNOLOGY CO., LTD.

Free format text: FORMER OWNER: INSTITUTE OF COMPUTING TECHNOLOGY, CHINESE ACADEMY OF SCIENCES

Effective date: 20130207

C41 Transfer of patent application or patent right or utility model
COR Change of bibliographic data

Free format text: CORRECT: ADDRESS; FROM: 100080 HAIDIAN, BEIJING TO: 523808 DONGGUAN, GUANGDONG PROVINCE

TR01 Transfer of patent right

Effective date of registration: 20130207

Address after: 523808 Guangdong province Dongguan City Songshan Lake Science and Technology Industrial Park Building No. 14 Keyuan pine

Patentee after: G-CLOUD TECHNOLOGY Co.,Ltd.

Address before: 100080 Haidian District, Zhongguancun Academy of Sciences, South Road, No. 6, No.

Patentee before: Institute of Computing Technology, Chinese Academy of Sciences

CP02 Change in the address of a patent holder
CP02 Change in the address of a patent holder

Address after: 523808 19th Floor, Cloud Computing Center, Chinese Academy of Sciences, No. 1 Kehui Road, Songshan Lake Hi-tech Industrial Development Zone, Dongguan City, Guangdong Province

Patentee after: G-CLOUD TECHNOLOGY Co.,Ltd.

Address before: 523808 No. 14 Building, Songke Garden, Songshan Lake Science and Technology Industrial Park, Dongguan City, Guangdong Province

Patentee before: G-CLOUD TECHNOLOGY Co.,Ltd.

CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20090304

CF01 Termination of patent right due to non-payment of annual fee