METHOD AND APPARATUS THEREOF FOR P2P TRAFFIC CLASSIFICATION USING HEURISTIC RULES

摘要

According to an embodiment of the present invention, a P2P traffic classification device consists of: a traffic capture processing device that captures packets; a packet level classifier that determines whether the packet contains certain character strings by a signature-based method at the packet level and classifies the traffic corresponding to the packet by using the signature-based method if the packet contains the character strings, or otherwise classifies the traffic corresponding to packets under connection heuristic rules at the packet level if the packet does not contain the character strings; and a flow level classifier that classifies the traffic based on statistic method at flow level if classification of traffic corresponding to packet is more needed, and revises the classified traffic based on the pattern heuristic rules.