APPARATUS, SYSTEM AND METHOD FOR RTP TUNNELING PACKET DETECTION IN 4G MOBILE NETWORK

摘要

An apparatus, a system and a method for a real-time transport protocol (RTP) tunneling packet detection in a 4G mobile network are provided. The RTP tunneling packet detector comprises: a packet information extracting unit for extracting a first source IP, a first source port, a first destination IP, and a first destination port from a GPRS tunneling protocol (GTP)-U packet, when the GTP-U packet includes an RTP packet; a session information storage unit for storing session information including a second source IP, a second source port, a second destination IP, a second destination port, and detection time information; a session information management unit for updating the detection time information in the session information, when all of the first source IP, the first source port, the first destination IP, and the first destination port are the same as the second source IP, the second source port, the second destination IP corresponding respectively to the first source IP, the first source port, the first destination IP, and the first destination port; a session information analysis unit for detecting an abnormal data packet using the detection time information in the session information; and a packet processing unit for processing the abnormal data packet according to the detection result of the session information analysis unit.;COPYRIGHT KIPO 2017