CN1838663A - Realization process for detecting VoIP application in IP network - Google Patents

Realization process for detecting VoIP application in IP network Download PDF

Info

Publication number
CN1838663A
CN1838663A CNA2005100556583A CN200510055658A CN1838663A CN 1838663 A CN1838663 A CN 1838663A CN A2005100556583 A CNA2005100556583 A CN A2005100556583A CN 200510055658 A CN200510055658 A CN 200510055658A CN 1838663 A CN1838663 A CN 1838663A
Authority
CN
China
Prior art keywords
information
voip
media stream
signaling
stream
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CNA2005100556583A
Other languages
Chinese (zh)
Other versions
CN1838663B (en
Inventor
刘利锋
郑志彬
刘廷永
刘淑玲
尹瀚
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CN2005100556583A priority Critical patent/CN1838663B/en
Publication of CN1838663A publication Critical patent/CN1838663A/en
Application granted granted Critical
Publication of CN1838663B publication Critical patent/CN1838663B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)
  • Telephonic Communication Services (AREA)

Abstract

This invention relates to a method for checking VoIP application in IP network. This invention includes: firstly, checking data flow that has media flow character in IP network; and monitoring the signaling current, and instilling the responding call information; and then connecting the checked result with the monitored result by the media channel direction information.

Description

In IP network, detect the implementation method that VoIP uses
Technical field
The present invention relates to network communications technology field, relate in particular to a kind of implementation method that VoIP uses that in IP network, detects.
Background technology
Along with the development of IP network technology, the extensive use of VoIP (IP-based voice) has promptly obtained the deployment of considerable scale, and swift and violent development.And use for this voip technology, no matter be that national correlation department or telecom operators all need to a certain degree keyholed back plate is carried out in the application of VoIP, and realize that keyholed back plate to VoIP is faced with many technical problems and needs to solve.Wherein, how detecting the VoIP application fast and accurately on IP network is one of problem that is faced.
For satisfying the demand, the scheme of this VoIP applying detection is provided at present, understand for each detection scheme being had clearly, below will be at first the characteristics of VoIP system be described.
In VoIP system, VoIP finishes the function of call setup and medium transmission respectively by signalling path and media channel, and wherein, media channel is for consulting dynamically to set up by the Signalling exchange on the signalling path.At present, H.323 VoIP system accepted standard call signaling comprises, SIP (session initiation protocol), MGCP (media network control protocol), H.248 waits; In addition, also there are some VoIP systems to adopt the mode of privately owned signaling protocol or employing tunnel style transmission voip signaling to finish the function of call setup and session teardown.
In existing VoIP system, adopt the RTP (RTP) of relatively uniform and comparative maturity usually by the applied media transfer protocol of described media channel transmit traffic data.
At present, the VoIP system of employing standard agreement all adopts the service port number of acquiescence, and also there is the port numbers of oneself in the system of employing proprietary protocol.A lot of VoIP systems of actual deployment are the unlawful VoIP system particularly, and for fear of closing down of telecom operators, the service port number that is adopted often is non-default port, also may spend one period and change.
Application for VoIP serve port above-mentioned non-acquiescence or dynamic has all brought obstacle to the detection of VoIP, that is to say, adopting non-standard signaling protocol and coming the VoIP implementation of command transmitting by the tunnel is that the detection that VoIP uses has brought difficulty.
Detect the VoIP application on the IP network for being implemented in, at present, provide a kind of solution of using by signaling flow identification VoIP, cardinal principle is for detecting by discerning voip signaling stream.
The main processing procedure of this scheme comprises: monitor the all-network packet, the feature of the voip signaling protocol that each packet utilization is supported is gone coupling and preliminary treatment then, if do not meet the feature of defined specific protocol, then filter, promptly described packet is not handled; If meet described feature, then described packet is carried out dissection process according to specific call signaling protocol, follow the tracks of this connection and call flow, and extract call details, thereby realize at the detection of whether using VoIP.
Yet owing to need need protocol analysis to detected signaling flow, and the dissection process process of a lot of voip signalings is very complicated, for a lot of proprietary protocols even can't resolve.Wherein, use for the VoIP of supported protocol not and obviously can't detect, therefore,, just need constantly upgrading to support new agreement in order to improve the detection accuracy rate.Along with increasing gradually of agreement, and the number of protocols that checkout equipment is supported is limited, and the system that will make detects performance worse and worse, and this obviously can't satisfy the accurate detection requirement.
And, in the prior art,,, still need a large amount of network datas is carried out dissection process although be provided with the processing procedure that the agreement pre-matching is filtered owing to all classify all data flow as suspicious signaling flow, cause detecting performance and be difficult to guarantee.Simultaneously, along with the increase of agreement, the burden of detection is increasing, and the probability that also makes detection system start a leak increases greatly.
Summary of the invention
In view of above-mentioned existing in prior technology problem, the purpose of this invention is to provide a kind of implementation method that in IP network, detects the VoIP application, thereby a kind of method simple, that detection efficiency higher detection VoIP uses that realizes is provided.
The objective of the invention is to be achieved through the following technical solutions:
The invention provides a kind of implementation method that VoIP uses that in IP network, detects, comprising:
A, determine the characteristic parameter information of Media Stream;
The media stream characteristics parameter information that B, basis are determined is checked the business datum of IP network transmission, and determines VoIP Business Stream wherein.
Described steps A comprises:
Determine the host-host protocol of Media Stream, be confirmed to be the parameter information of the stream parameter information of Media Stream and/or the Media Stream that really admitted a fault.
The host-host protocol of described Media Stream comprises User Data Protocol UDP and realtime transmission protocol RTP; The stream parameter information of described Media Stream comprises the IP address and the port number information of circulation road; Described is not that the parameter information of Media Stream comprises: port information.
Described step B comprises:
The Business Stream that need not to detect in B1, the characteristic parameter information filtering IP network according to Media Stream is determined the Business Stream that need detect;
The packet that B2, the Business Stream that needs are detected comprise is sampled, and obtains the partial data bag in the Business Stream;
B3, described partial data bag is carried out Media Stream detect, determine that VoIP wherein uses, and preserve the media channel information of respective media stream.
Described step B also comprises:
The described partial data bag of step B2 is cached in buffering area, and behind complete described step B3, the partial data bag of deletion buffer memory.
Described step B3 also comprises:
The circulation road IP address of the Media Stream that the VoIP that determines is used and port number information are as the stream parameter information preservation of confirming as Media Stream.
The described implementation method that detects the VoIP application in IP network also comprises:
C, the signaling flow in the IP network is monitored, determine voip signaling wherein, and from described voip signaling, extract call information.
Described step C specifically comprises:
C1, according to the configuration port number information and corresponding protocols information thereof, the signaling flow in the IP network is carried out filtration treatment, determine qualified signaling;
C2, qualified signaling is carried out dissection process according to corresponding protocols information, determine voip signaling wherein;
C3, from described definite voip signaling, extract and preserve corresponding call information.
Described step C1 also comprises:
Obtain described port number information corresponding protocols information according to content search port agreement matching list in the table of the port number information that is writing down configuration; And the port number information that disposes in the described table, and in the described port agreement matching list informational needs according to the practical situations real-time update.
The described implementation method that detects the VoIP application in IP network also comprises:
D, the media channel information of preserving and the call information of preservation are mated comparison process, and the media stream recording of media channel information and call information coupling wherein.
Described step D specifically comprises:
The address information of D1, definite media channel of preserving, and the address of the media channel that writes down in the call information of preserving, and matching ratio is;
D2, when coupling compares two identical media channel addresses, record corresponding call information in the call record storehouse.
Described step D2 also comprises:
A newly-built call record writes down corresponding initial IP signaling packet;
Automatic or manual attempt to be resolved described initial IP signaling packet, and determines protocol information and the corresponding port information that needs increase according to analysis result, and automatic or manual carry out corresponding upgrading processing.
As seen from the above technical solution provided by the invention, among the present invention,, therefore, can obtain higher detection efficient, and the height of detection efficiency is irrelevant with the call control protocol of taking owing to adopted the implementation that detects VoIP by Media Stream.
And, among the present invention, because Real-time Transport Protocol is simple relatively, to the identification of Real-time Transport Protocol also than being easier to, simultaneously, testing mechanism is not all classified all data flow as suspicious data stream, but at first by suspicious port blacklist mechanism majority of traffic is filtered, thereby has reduced the burden that identification is handled.Therefore, the present invention can reach than higher detection performance.
In addition, realization of the present invention makes the Media Stream recognition mechanism need not upgrading, thereby has simplified the implementation of VoIP detection system.
Monitor the detailed information of voip call of obtaining by increasing signaling flow.Thereby overcome and only detected the drawback that detailed call information can not be provided by Media Stream.
By the contrast of signaling flow supervision result and Media Stream testing result, make to have the function of self study and upgrading.
Description of drawings
Fig. 1 detects process flowchart for Media Stream among the present invention;
Fig. 2 monitors flow chart for signaling among the present invention;
Fig. 3 is the process flowchart of the VoIP applying detection described in the present invention.
Embodiment
Core of the present invention is based on Media Stream and carries out the detection that VoIP uses, and is aided with the processing procedure that signaling flow monitors, thereby the VoIP that realizes detecting rapidly and accurately in the IP network uses.
In concrete application, most of VoIP systems are all taked more unified Media Stream, therefore, can detect VoIP with media stream characteristics and use, obtaining, and can avoid detecting the drawback that existing part signaling possibly can't detect by signaling flow than higher detection efficiency.
In addition, the relative signaling of media detection detects fairly simple, can flow to line sampling to data and detect, so also can obtain the performance of comparison high detection.
But detect VoIP by Media Stream and use CDR (call detail record) information that can not obtain each voip call.For this reason, need monitor obtaining corresponding C DR information signaling flow, thereby reach more satisfactory detection effect.And, owing to be not in order to improve detection efficiency to the supervision of signaling flow, and,, therefore can not influence the efficient of detection so need not to carry out complicated signaling resolving just in order to obtain the call information of associated call.
For the present invention there being further understanding, be described in detail below in conjunction with the specific implementation of accompanying drawing to method of the present invention.
Method of the present invention mainly comprises in the specific implementation process: Media Stream detects identification processing procedure, and signaling flow monitors processing procedure, and the processing procedure of definite testing result, respectively as Fig. 1, Fig. 2 and shown in Figure 3.
At first in conjunction with Fig. 1 Media Stream of the present invention being detected identification processing procedure is elaborated.
Any VoIP uses, and all shows as the appearance of Media Stream.All have detected Media Stream and have just meaned that having detected possible VoIP uses.The media channel port is that VoIP connects and to set up the process dynamic negotiation and obtain, so have uncertainty, it all might be the UDP bag that any one high port gets the UDP message bag, make we one by one packet detect.
In carrying out the Media Stream testing process, should be noted that following three key points:
(1) 1024 is generally system's reserved port with lower port, generally is not used for media stream, also has some other well-known port also not to be used for media stream, therefore, can keep a white list based on port among the present invention; Fall into white list port the UDP message bag we will directly let slip, be left intact, so that the performance that improve to detect; Like this, the present invention just can improve the efficient of detection by the method for constantly improving white list.
(2) because media channel foundation in a single day, transmit in network having a large amount of media data packet (the about 8KB/s of speed), in order to detect the existence of this data flow, do not need that each packet is all carried out the medium bag and differentiate detection, and only need carry out sampling Detection to packet, can reduce the treating capacity of equipment so greatly, thereby improve handling property.
(3) the transportation protocol RTP of Media Stream employing has obvious characteristics, and the field head is a determined value, and the timestamp sequence number increases progressively, and SSRC (synchronisation source) field is identical value; Can be by this Media Stream being detected with first-class packet feature.
Based on above-mentioned three key points, corresponding Media Stream detects identification processing procedure as shown in Figure 1, specifically comprises following treatment step:
Step 11: testing process at first flows through filter with non-UDP in the network traffics, and utilizes RTP to begin byte and carry out the Media Stream pre-filtering for particular value;
Step 12: will carry out filtration treatment according to the tunnel ip address and the port numbers of the Media Stream that has detected as filtercondition through the Business Stream in the IP network of pre-filtering processing, thereby the convenient Media Stream that has detected no longer enters later treatment step, to improve detection efficiency;
Step 13: the Packet Filtering that falls into the port white list in the Business Stream after step 12 handled, the Packet Filtering that is about in the Business Stream port that can not media stream is fallen;
Step 14: the packet through above-mentioned filtration treatment is carried out sampling Detection;
Because the identification Media Stream does not need all media stream data bags are all detected, so following step is carried out data packet sampling;
Step 15: the packet after will sampling is put into data packet buffer, handles so that carry out further VoIP applying detection;
Step 16: adopt the real-time data of Media Stream detection algorithm to detect, promptly carry out Media Stream and detect differentiation, determine whether the data in the buffering are Media Stream in the buffering;
Step 17: the information that will meet the stream of media stream characteristics is extracted and record, promptly preserve the Media Stream testing result, described testing result can be used as the filtercondition in the step 12 on the one hand, the circulation road IP address of the Media Stream that the VoIP that is about to determine uses and port number information are preserved as the filtercondition in the step 12 as the stream parameter information of confirming as Media Stream, on the other hand can also be as the foundation that obtains final detection result, promptly preserve the media channel information of respective media stream, described media channel information is the media channel address information, specifically referring in the processing procedure shown in Figure 3;
After the detection processing procedure at the data in the buffering finishes, all packets are abandoned from buffering, continue to detect new packet, promptly re-execute the processing procedure of step 11 to step 17.
In conjunction with Fig. 2 the signaling flow that relates among the present invention is monitored that processing procedure describes again below.
Each specific VoIP system of having disposed is the same with other services on the Internet, all has specific concrete port (regardless of still being self-defining port) for default port, for the VoIP system of the having disposed system of fairly large application particularly, revise port and be not very nothing the matter feelings, therefore, the port information of the use of voip signaling should relative fixed.
Based on the relative certainty of signaling port as can be known, in monitoring the voip signaling processing procedure, there is no need the scepticize port all is suspicious port, promptly can realize supervision by detection to specific port at voip signaling, then, further get rid of again, from the signaling of determining, extract call-related information more at last by other gimmicks.For this reason, need keep a port blacklist method, writing down voip signaling in the port blacklist can applicable port information, and the information in the port blacklist can be learnt increase automatically or manual configuration by investigation and signaling port.Like this, just, can avoid each packet is attempted encoding or attempted the pretreated resource waste of bringing.
Among the present invention, before flow process begins, need to do some pre-configured work, specifically comprise information such as protocol port matching list, port blacklist.Described signaling flow supervision flow process main purpose is extracted call information from signaling flow, corresponding processing procedure specifically may further comprise the steps as shown in Figure 2:
Step 21: the data flow that listens to is at first fallen according to the data stream filtering that described port blacklist will not fall into blacklist, promptly kept the data flow on the port that falls into blacklist, so that further whether detection is voip signaling;
Step 22: inquiry port agreement matching list obtains the protocol information that VoIP system is supported, utilize the protocol information of corresponding port to carry out the agreement preliminary treatment, judge promptly whether corresponding signaling flow meets the feature of the protocol information of VoIP system support, if meet this protocol characteristic then enter the handling process of step 23, otherwise, abandon;
Step 23: carry out profound analysis of agreement and coupling, be specially according to the information of the concrete agreement of using described signaling flow is done further inspection, to determine whether being voip signaling, when determining that it is voip signaling, then execution in step 24, otherwise, abandon;
Step 24: the detailed call information in the voip signaling of determining is extracted by protocol analysis or specific call information extraction algorithm.
In above-mentioned signaling surveillance, should upgrade in time accordingly and upgrade according to the VoIP agreement of reality and the variation of port; At this moment because in actual application, at any time has the appearance of new privately owned signaling protocol, so checkout equipment needs constantly follow-up upgrading, comprise renewal on the one hand, also comprise on the other hand at relevant agreement increasing corresponding pretreatment process and the profound coupling of agreement flow process port agreement matching list.Simultaneously, among the present invention, corresponding VoIP Media Stream also may adopt new port transmission, and therefore, the port blacklist list described in the present invention also needs to upgrade according to the applicable cases of reality, to guarantee to monitor the effect of signaling.
At last, in conjunction with Fig. 3 the processing procedure of determining testing result is described in detail again.
How Media Stream testing result and the call information that extracts from signaling flow being associated is another problem that the present invention need solve.Related basic point is the description of a media channel for the Media Stream testing result, also can extract this media channel address from signaling flow.Therefore, can assert that Media Stream and signaling flow with identical media channel address should be same voip conversation, and can keep corresponding call information at this voip conversation.
Can have result that result that signaling flow detects and Media Stream detect situation one to one in association, this is normally because the signaling that the signaling surveillance is supported is incomplete caused.For this reason, can be by in the signaling surveillance, increasing the details that protocol process module obtains more sessions.Monitor in the related treatment mechanism of result's (i.e. call information of Ti Quing) at Media Stream testing result provided by the invention and signaling flow, not only can indicate need to increase agreement quantity what, but also can provide the analysis data by the upgrading of writing down original unsupported signaling data Bao Laiwei system.
As shown in Figure 3, the processing procedure of determining testing result is exactly that the Media Stream testing result is monitored the related processing procedure of result with signaling flow, specifically may further comprise the steps:
Step 31: related flow process is at first obtained signaling according to signaling supervision processing procedure and is monitored the result, and execution in step 33, monitor the result according to described signaling, promptly the call information of Ti Quing is set up the call record storehouse, in store corresponding media channel address information of calling out in the call record storehouse;
Step 32: related flow process is obtained the media detection result of media detection process, comprises media channel address information etc.;
Step 34: when detecting a Media Stream during Media Stream detects, just seek whether the record of identical media channel address is arranged from the call record storehouse, if having, then execution in step 35, otherwise execution in step 36;
Step 35: will from Media Stream, detected information insert corresponding call record.
Step 36: the signaling of determining this Media Stream correspondence is not detected, and therefore, need increase new record in the call record storehouse, the raw data packets of the signaling that record is corresponding, and preservation simultaneously, execution in step 37;
Step 37: can be manually or analyze raw data packets automatically and obtain the corresponding protocol feature, just analyze according to the feature of raw data packets, so that in the signaling surveillance, increase the processing capacity of related protocol, the protocol processes part of upgrading signaling monitor module.
Because signaling flow is monitored not to be in order to detect VoIP, and just in order to extract the call information of some, therefore, the present invention has adopted above-mentioned particular processing method, thereby avoided the protocol processes and the resolving of more complicated effectively, improved the handling property that signaling monitors widely.
In sum, the present invention is owing to adopted the scheme that detects VoIP by Media Stream, and, present most VoIP system adopts unified Real-time Transport Protocol to come transmission medium, so the present invention can obtain very high detection efficiency, and the height of detection efficiency is irrelevant with the call control protocol of taking.
Simultaneously, among the present invention, also because Real-time Transport Protocol is simple relatively, to the identification of Real-time Transport Protocol also than being easier to; And adopted the method for data packet sampling, and the processing mode of at first by suspicious port blacklist mechanism majority of traffic being filtered, use the burden that identification is handled thereby reduced VoIP, and can reach than higher detection performance.
In addition, the Media Stream recognition mechanism among the present invention is not need upgrading; And just adopt relatively uniform call information extracting method in the signaling flow monitoring mechanism.Only need port agreement correspondence table that signaling flow is monitored so increase new signaling protocol, and do some simple processing and get final product.
The above; only for the preferable embodiment of the present invention, but protection scope of the present invention is not limited thereto, and anyly is familiar with those skilled in the art in the technical scope that the present invention discloses; the variation that can expect easily or replacement all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion with the protection range of claim.

Claims (12)

1, a kind of implementation method that detects the VoIP application in IP network is characterized in that, comprising:
A, determine the characteristic parameter information of Media Stream;
The media stream characteristics parameter information that B, basis are determined is checked the business datum of IP network transmission, and determines VoIP Business Stream wherein.
2, the implementation method that detects the VoIP application in IP network according to claim 1 is characterized in that described steps A comprises:
Determine the host-host protocol of Media Stream, be confirmed to be the parameter information of the stream parameter information of Media Stream and/or the Media Stream that really admitted a fault.
3, the implementation method that detects the VoIP application in IP network according to claim 2 is characterized in that the host-host protocol of described Media Stream comprises User Data Protocol UDP and realtime transmission protocol RTP; The stream parameter information of described Media Stream comprises the IP address and the port number information of circulation road; Described is not that the parameter information of Media Stream comprises: port information.
4, according to claim 1, the 2 or 3 described implementation methods that in IP network, detect the VoIP application, it is characterized in that described step B comprises:
The Business Stream that need not to detect in B1, the characteristic parameter information filtering IP network according to Media Stream is determined the Business Stream that need detect;
The packet that B2, the Business Stream that needs are detected comprise is sampled, and obtains the partial data bag in the Business Stream;
B3, described partial data bag is carried out Media Stream detect, determine that VoIP wherein uses, and preserve the media channel information of respective media stream.
5, the implementation method that detects the VoIP application in IP network according to claim 4 is characterized in that described step B also comprises:
The described partial data bag of step B2 is cached in buffering area, and behind complete described step B3, the partial data bag of deletion buffer memory.
6, the implementation method that detects the VoIP application in IP network according to claim 4 is characterized in that described step B3 also comprises:
The circulation road IP address of the Media Stream that the VoIP that determines is used and port number information are as the stream parameter information preservation of confirming as Media Stream.
7, the implementation method that detects the VoIP application in IP network according to claim 4 is characterized in that this method also comprises:
C, the signaling flow in the IP network is monitored, determine voip signaling wherein, and from described voip signaling, extract call information.
8, the implementation method that detects the VoIP application in IP network according to claim 7 is characterized in that described step C specifically comprises:
C1, according to the configuration port number information and corresponding protocols information thereof, the signaling flow in the IP network is carried out filtration treatment, determine qualified signaling;
C2, qualified signaling is carried out dissection process according to corresponding protocols information, determine voip signaling wherein;
C3, from described definite voip signaling, extract and preserve corresponding call information.
9, the implementation method that detects the VoIP application in IP network according to claim 8 is characterized in that described step C1 also comprises:
Obtain described port number information corresponding protocols information according to content search port agreement matching list in the table of the port number information that is writing down configuration; And the port number information that disposes in the described table, and in the described port agreement matching list informational needs according to the practical situations real-time update.
10, the implementation method that detects the VoIP application in IP network according to claim 7 is characterized in that this method also comprises:
D, the media channel information of preserving and the call information of preservation are mated comparison process, and the media stream recording of media channel information and call information coupling wherein.
11, the implementation method that detects the VoIP application in IP network according to claim 10 is characterized in that described step D specifically comprises:
The address information of D1, definite media channel of preserving, and the address of the media channel that writes down in the call information of preserving, and matching ratio is;
D2, when coupling compares two identical media channel addresses, record corresponding call information in the call record storehouse.
12, the implementation method that detects the VoIP application in IP network according to claim 11 is characterized in that described step D2 also comprises:
A newly-built call record writes down corresponding initial IP signaling packet;
Automatic or manual attempt to be resolved described initial IP signaling packet, and determines protocol information and the corresponding port information that needs increase according to analysis result, and automatic or manual carry out corresponding upgrading processing.
CN2005100556583A 2005-03-22 2005-03-22 Realization process for detecting VoIP application in IP network Expired - Fee Related CN1838663B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2005100556583A CN1838663B (en) 2005-03-22 2005-03-22 Realization process for detecting VoIP application in IP network

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2005100556583A CN1838663B (en) 2005-03-22 2005-03-22 Realization process for detecting VoIP application in IP network

Publications (2)

Publication Number Publication Date
CN1838663A true CN1838663A (en) 2006-09-27
CN1838663B CN1838663B (en) 2010-06-23

Family

ID=37015918

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2005100556583A Expired - Fee Related CN1838663B (en) 2005-03-22 2005-03-22 Realization process for detecting VoIP application in IP network

Country Status (1)

Country Link
CN (1) CN1838663B (en)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2011060661A1 (en) * 2009-11-18 2011-05-26 中兴通讯股份有限公司 Method and apparatus for identifying voip traffic
CN102340454A (en) * 2011-11-10 2012-02-01 中国人民解放军重庆通信学院 General identification method of VoIP (voice over Internet protocol) network data stream
CN102630088A (en) * 2012-03-12 2012-08-08 北京中创信测科技股份有限公司 Method for carrying out signaling analysis through customizing state machine
CN102904770A (en) * 2012-08-02 2013-01-30 北京邮电大学 High-bandwidth voice over Internet protocol (VoIP) detection system
CN102946500A (en) * 2012-12-03 2013-02-27 深圳中兴网信科技有限公司 VoIP (voice over internet protocol) control system and VoIP control method

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100349449C (en) * 2004-02-27 2007-11-14 北京邮电大学 End-to-end network measuring method based on real-time transmission protocol

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2011060661A1 (en) * 2009-11-18 2011-05-26 中兴通讯股份有限公司 Method and apparatus for identifying voip traffic
RU2510916C2 (en) * 2009-11-18 2014-04-10 ЗетТиИ Корпорейшн METHOD AND APPARATUS FOR IDENTIFYING VoIP TRAFFIC
US8792477B2 (en) 2009-11-18 2014-07-29 Zte Corporation Method and apparatus for identifying VoIP traffic
CN102340454A (en) * 2011-11-10 2012-02-01 中国人民解放军重庆通信学院 General identification method of VoIP (voice over Internet protocol) network data stream
CN102340454B (en) * 2011-11-10 2017-10-31 中国人民解放军重庆通信学院 A kind of universal identification method of voip network data flow
CN102630088A (en) * 2012-03-12 2012-08-08 北京中创信测科技股份有限公司 Method for carrying out signaling analysis through customizing state machine
CN102904770A (en) * 2012-08-02 2013-01-30 北京邮电大学 High-bandwidth voice over Internet protocol (VoIP) detection system
CN102946500A (en) * 2012-12-03 2013-02-27 深圳中兴网信科技有限公司 VoIP (voice over internet protocol) control system and VoIP control method
CN102946500B (en) * 2012-12-03 2015-07-22 深圳中兴网信科技有限公司 VoIP (voice over internet protocol) control system and VoIP control method

Also Published As

Publication number Publication date
CN1838663B (en) 2010-06-23

Similar Documents

Publication Publication Date Title
CN1838663A (en) Realization process for detecting VoIP application in IP network
CN101035157A (en) IP network based voice detection and control method and system
CN1870514A (en) Method for analysing session service quality
CN1852560A (en) Subscriber identy identifying method and calling control method and system
CN1941753A (en) IP interconnected gateway in next-generation Internet and method for interconnecting IP domain
CN101079807A (en) A mesh relaying method and IP communication system for controlling media transmission path
CN101079798A (en) NAT method and method for realizing access control list
CN1897622A (en) Method for inspecting and releasing abnormal realtime transmission protocol source of medium gateway
CN1913456A (en) Method of identifing VOIP flow based on SIP protocol process performance
CN101035034A (en) Method and device for detecting the message attack
CN1937544A (en) IP phone monitoring system
CN101043756A (en) Method, apparatus and system for processing special service after IP core network
CN1870640A (en) Method for multimedia service
CN101056273A (en) Session-based network speed limit method and device
CN1604589A (en) SIP crossing supported firewall implementing method
CN110061979B (en) Method and device for detecting business object
CN101047509A (en) Session attack detection system and method
CN1708167A (en) Method for processing local service in mobile network IP multimedia sub-system
US7436814B2 (en) Selecting transport addresses to route streams between endpoints
CN1855793A (en) Control of video encoding speed
CN1791002A (en) MGC obtaining service quality information realizing method in next generation network
CN1897561A (en) Method for protecting VOIP digital signal processing channel
CN108234498B (en) Communication call tracing method and system
CN102158615A (en) LINUX-based media server in (Voice Over Internet Protocol) system and playback method of media server
CN112584134B (en) Method and device for testing video conference code stream, computer equipment and storage medium

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20100623

Termination date: 20170322