CN110971530B - Video traffic data identification method, device and equipment - Google Patents
Video traffic data identification method, device and equipment Download PDFInfo
- Publication number
- CN110971530B CN110971530B CN201811141045.5A CN201811141045A CN110971530B CN 110971530 B CN110971530 B CN 110971530B CN 201811141045 A CN201811141045 A CN 201811141045A CN 110971530 B CN110971530 B CN 110971530B
- Authority
- CN
- China
- Prior art keywords
- traffic data
- video
- tcp connection
- data
- flow data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 60
- 230000005540 biological transmission Effects 0.000 claims description 29
- 238000004590 computer program Methods 0.000 claims description 9
- 238000001514 detection method Methods 0.000 claims description 6
- 238000012545 processing Methods 0.000 claims description 6
- 230000009286 beneficial effect Effects 0.000 abstract description 2
- 238000011144 upstream manufacturing Methods 0.000 description 9
- 230000008569 process Effects 0.000 description 7
- 230000000903 blocking effect Effects 0.000 description 6
- 238000004891 communication Methods 0.000 description 6
- 238000010586 diagram Methods 0.000 description 4
- 230000009471 action Effects 0.000 description 3
- 238000007689 inspection Methods 0.000 description 3
- 230000006870 function Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000007619 statistical method Methods 0.000 description 2
- 238000012546 transfer Methods 0.000 description 2
- 230000006399 behavior Effects 0.000 description 1
- 230000003139 buffering effect Effects 0.000 description 1
- 230000001427 coherent effect Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H04L63/0227—Filtering policies
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/19—Flow control; Congestion control at layers above the network layer
- H04L47/193—Flow control; Congestion control at layers above the network layer at the transport layer, e.g. TCP related
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/20—Traffic policing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/24—Traffic characterised by specific attributes, e.g. priority or QoS
- H04L47/2483—Traffic characterised by specific attributes, e.g. priority or QoS involving identification of individual flows
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
Abstract
The application discloses a method for identifying video flow data, which comprises the following steps: when detecting that a server establishes a TCP connection for a network access request of a client and transmits traffic data with the client through the TCP connection, judging whether the traffic data accords with the video traffic statistical characteristic; if yes, judging that the flow data corresponding to the TCP connection are all video flow data. The method based on feature statistics can identify the TCP connection which has transmitted the traffic data partially conforming to the video traffic statistics feature so as to block the video traffic data and ensure the normal use of other network resources sharing the same DNS with the video resource file. The application also discloses a device, equipment and a computer readable storage medium for identifying video flow data, which have the beneficial effects.
Description
Technical Field
The present invention relates to the field of network technologies, and in particular, to a method, an apparatus, a device, and a computer readable storage medium for identifying video traffic data.
Background
An access controller (Access Controller, AC) is a network device responsible for managing network access points in a regional network, the main functions of which include access control for different network access points, etc.
Access control pertains to security-related functions to prevent or control certain communications and interactions between users and network servers. It is often necessary for most enterprises and institutions to prevent and control the transmission of video traffic data in their internal local area networks in order to avoid the transmission rate of normal office traffic data and the like from being affected.
For network security, the existing network transmission process generally employs encryption measures, typically, SSL (Secure Sockets Layer, secure socket layer) protocol is used to encrypt the network connection. Since the file format corresponding to the encrypted traffic data cannot be seen, the video traffic data cannot be identified directly by the file format, in the prior art, the blocking of video traffic data is mainly implemented by using DNS (Domain Name System ) of a video file, that is, DNS of a known video file is listed in a "blacklist" so as to uniformly block all traffic data from the DNS. However, in practical applications, the video traffic data and other normal office traffic data share the same DNS in many cases, for example, large web service products such as Facebook or Youtube, and various web services thereof including video, information, communication, games, etc. all use the same DNS and authentication credentials in common. Therefore, the blocking method in the prior art can intercept the transmission of video traffic data, but can also affect the network use of other normal office services.
Therefore, the identification method of what video traffic data is adopted for plugging is further adopted, and meanwhile normal use of other network resources sharing the DNS with the video traffic data is not affected, so that the method is a technical problem to be solved urgently by those skilled in the art.
Disclosure of Invention
The invention aims to provide a method, a device, equipment and a computer readable storage medium for identifying video traffic data, so as to conduct targeted blocking on the video traffic data without affecting normal use of other network resources sharing DNS with the video traffic data.
In order to solve the above technical problems, the present application provides a method for identifying video traffic data, including:
when detecting that a server establishes a TCP connection for a network access request of a client and transmits traffic data with the client through the TCP connection, judging whether the traffic data accords with a video traffic statistical characteristic or not;
if yes, judging that the flow data corresponding to the TCP connection are all video flow data.
Optionally, the video traffic statistics feature includes:
the uplink flow data in the flow data is smaller than the preset quantity proportion, and the downlink flow data is transmitted in a time-sharing mode.
Optionally, the video traffic statistics feature further includes:
and the transmission rate of the downlink flow data is higher than a preset rate threshold.
Optionally, before the determining whether the traffic data meets the video traffic statistics feature, the method further includes:
judging whether the TCP connection is a TCP short connection or not;
if not, continuing to execute the step of judging whether the flow data accords with the video flow statistical characteristics;
if yes, judging that the flow data corresponding to the TCP connection is non-video flow data.
Optionally, after the determining that the traffic data corresponding to the TCP connection are all video traffic data, the method further includes:
disconnecting the TCP connection to terminate transmission of the traffic data.
Optionally, the preset quantity ratio is 10%.
The application also provides a device for identifying the video flow data, which comprises a detection module and a judgment module;
when the detection module detects that a TCP connection is established by a server for a network access request of a client and traffic data is transmitted with the client through the TCP connection, the judgment module is used for judging whether the traffic data accords with the video traffic statistical characteristic; if yes, judging that the flow data corresponding to the TCP connection are all video flow data.
Optionally, the method further comprises:
the processing module is used for: and the judging module is used for disconnecting the TCP connection so as to terminate the transmission of the traffic data after judging that the traffic data corresponding to the TCP connection are all video traffic data.
The application also provides a video traffic data identification device, comprising:
a memory: for storing a computer program;
a processor: steps for executing the computer program to implement any of the video traffic data identification methods described above.
The present application also provides a computer readable storage medium having stored therein a computer program which when executed by a processor is adapted to carry out the steps of any one of the methods of identifying video traffic data as described above.
The identification method of the video flow data provided by the application comprises the following steps: when detecting that a server establishes a TCP connection for a network access request of a client and transmits traffic data with the client through the TCP connection, judging whether the traffic data accords with a video traffic statistical characteristic or not; if yes, judging that the flow data corresponding to the TCP connection are all video flow data.
Therefore, the identification method of video traffic data provided by the application does not use DNS or authentication credentials as identification information of video traffic data as in the prior art, but respectively judges traffic data of different TCP connections under the same DNS, that is, uses traffic data in the same TCP connection as a processing unit, identifies a TCP connection which has transmitted traffic data partially conforming to the statistical characteristics of video traffic based on a feature statistical method, so that the TCP connection is judged as a network connection corresponding to video network resources, and the transmitted traffic data is judged as video traffic data, so that the video traffic data can be blocked for the TCP connection. The method and the device do not block traffic data aiming at the DNS or the authentication certificate, so that normal use of other network resources sharing the same DNS with the video resource file can be effectively ensured. The video flow data identification device, the video flow data identification equipment and the computer readable storage medium can realize the video flow data identification method, and have the beneficial effects.
Drawings
In order to more clearly illustrate the prior art and the technical solutions in the embodiments of the present application, the following will briefly describe the drawings that need to be used in the description of the prior art and the embodiments of the present application. Of course, the following figures related to the embodiments of the present application are only some of the embodiments of the present application, and it is obvious to those skilled in the art that other figures can be obtained from the provided figures without any inventive effort, and the obtained other figures also belong to the protection scope of the present application.
Fig. 1 is an application scenario diagram of a method for identifying video traffic data provided in the present application;
FIG. 2 is a flowchart of a method for identifying video traffic data provided in the present application;
FIG. 3 is a flow chart of yet another method for identifying video traffic data provided herein;
fig. 4 is a block diagram of a video traffic data identifying apparatus according to the present application.
Detailed Description
The core of the application is to provide a method, a device, equipment and a computer readable storage medium for identifying video traffic data so as to conduct targeted blocking on the video traffic data without affecting normal use of other network resources sharing DNS with the video traffic data.
In order to more clearly and completely describe the technical solutions in the embodiments of the present application, the technical solutions in the embodiments of the present application will be described below with reference to the drawings in the embodiments of the present application. It will be apparent that the described embodiments are only some, but not all, of the embodiments of the present application. All other embodiments, which can be made by one of ordinary skill in the art without undue burden from the present disclosure, are within the scope of the present disclosure.
The identification method of the video flow data can be particularly applied to the network management equipment of the access controller so as to judge the flow data accessed by each client and identify the video flow data in the flow data, thereby intercepting and blocking the network access behavior of the video file for the user in time.
Referring to fig. 1, fig. 1 is an application scenario diagram of a method for identifying video traffic data provided in the present application. The access controller 12 is a core of the entire communication network, and is configured to manage each network access point, that is, each client 11, and manage communication connection and communication configuration between each client 11 and the server 13.
Referring to fig. 2, fig. 2 is a flowchart of a method for identifying video traffic data provided in the present application, which mainly includes the following steps:
step 21: when detecting that a server establishes a TCP connection for a network access request of a client and transmits traffic data with the client through the TCP connection, judging whether the traffic data accords with the video traffic statistical characteristic; if so, step 22 is entered.
Step 22: and judging that the traffic data corresponding to the TCP connection are all video traffic data.
Specifically, after a user initiates a network access request to a server through a client, a process in which the server provides a network service for the client is a process in which a TCP connection is established and traffic data is transmitted to each other through the TCP connection. Specifically, traffic data generated in a TCP connection is generally divided into two types, upstream traffic data and downstream traffic data. The uplink traffic data is the traffic data sent from the client to the server, and the downlink traffic data is the traffic data sent from the server to the client.
It will be appreciated by those skilled in the art that a TCP connection corresponds to a client's access channel to a particular network resource, i.e., a client accessing a different network resource will generate a different TCP connection. For example, when a user views a video file on a website page, a first TCP connection corresponds to the user, and when the user views a picture file on a website page, a second TCP connection corresponds to the user.
Therefore, in order to effectively distinguish video traffic data generated when accessing a video file from other types of traffic data, the present application specifically recognizes the traffic data in units of TCP connection. One skilled in the art can specifically distinguish between different TCP connections by using DNS, certificates, or other extension fields.
For a TCP connection, after the TCP connection is established, the present application may start to continuously perform feature statistics on the generated traffic data, and once the generated traffic data is found to conform to the statistical feature of the video traffic data, it indicates that the network resource corresponding to the TCP connection should be a video file, and the traffic data that has been generated or is about to be generated in the TCP connection is the video traffic data, so that the video traffic data may be blocked with respect to the TCP connection.
Therefore, the identification method of video traffic data provided by the application does not use DNS or authentication credentials as identification information of video traffic data as in the prior art, but respectively judges traffic data of different TCP connections under the same DNS, that is, uses traffic data in the same TCP connection as a processing unit, identifies a TCP connection which has transmitted traffic data partially conforming to the statistical characteristics of video traffic based on a feature statistical method, so that the TCP connection is judged as a network connection corresponding to video network resources, and the transmitted traffic data is judged as video traffic data, so that the video traffic data can be blocked for the TCP connection. The method and the device do not block traffic data aiming at the DNS or the authentication certificate, so that normal use of other network resources sharing the same DNS with the video resource file can be effectively ensured.
The method for identifying video traffic data provided by the application is based on the above embodiment:
as a preferred embodiment, the video traffic statistics feature comprises:
the uplink flow data in the flow data is smaller than the preset quantity proportion, and the downlink flow data is transmitted in a time-sharing mode.
In particular, the video traffic statistics may include the following two points: the uplink flow data is smaller than the preset quantity proportion, and the downlink flow data is transmitted in a time-sharing mode. In particular, other classes of traffic data that are similar to video traffic data are picture traffic data and file download traffic data.
According to whether the uplink traffic data is smaller than the preset quantity proportion, the picture traffic data can be distinguished, and the proportion of the uplink traffic data in the picture traffic data is relatively larger than that of the video traffic data and the file downloading traffic data, so that the TCP connection with the proportion of the uplink traffic data not smaller than the preset quantity proportion can be judged to be the TCP connection corresponding to the picture traffic data. In this case, as a preferred embodiment, the predetermined amount ratio may be set to 10% specifically. Of course, the up-down adjustment may be performed according to the actual application, for example, the preset number proportion may be selected and set in a common proportion range of 5% -15%, and of course, the number of the preset number proportion may be set in other ranges by a person skilled in the art, which is not limited in this application.
In addition, the upstream traffic data in the picture traffic data is basically regularly mixed in the downstream traffic data, so that a person skilled in the art can also use whether the upstream traffic data has regularity as an auxiliary judging condition of the picture traffic data. The regularity can be judged according to whether the ratio of the number of the downlink flow data packets to the number of the uplink flow data packets is stable or not; in particular, statistics may be started each time an upstream traffic packet occurs, so as to calculate the number of all downstream traffic packets during the period until the next upstream traffic packet occurs, as the ratio. If the ratio is relatively stable, for example, the variation is less than 20%, it can be determined that the upstream flow data in the flow data is regular. If the uplink traffic data occupies a higher quantity proportion in the traffic data of a certain TCP connection and is regularly mixed in the downlink traffic data, the TCP connection can be basically confirmed to be the TCP connection corresponding to the picture file, and the generated traffic data are all picture traffic data.
Secondly, although the video traffic data and the file downloading traffic data have the characteristics of relatively less uplink traffic data and relatively more downlink traffic data, the video traffic data also has the characteristics which are not possessed by one file downloading traffic data, namely, the downlink traffic data in the video traffic data are generally transmitted in a time-sharing manner. This is because most manufacturers providing video resource services will use a segment buffer strategy to save the bandwidth of the server, that is, not to transmit all video traffic data at one time, but to pause after buffering for a period of time, and to wait for the user to see the next segment while keeping up with the buffer schedule. Therefore, the downlink traffic data of the video traffic data has the characteristic of time-division transmission. In the downloading process of the resource file, the user often has higher downloading speed requirement, and the downloading process of the resource file is required to be completed quickly, so that manufacturers for providing downloading of the resource file can meet the downloading speed requirement of the user as much as possible, and the downlink flow data in the file downloading flow data is generally completed once and is not transmitted in a time-division manner.
As a preferred embodiment, the video traffic statistics further comprises:
the transmission rate of the downlink traffic data is higher than a preset rate threshold.
Specifically, since the video, the picture, and the resource file that generally needs to be downloaded are all often large, the transmission rate of the downstream traffic data in the video traffic data, the picture traffic data, and the file download traffic data is also often large. Generally, video traffic data is largest compared with the three, followed by picture traffic data and file download traffic data. Therefore, whether the transmission rate of the downlink traffic data is higher than a preset rate threshold value can be used for simply judging the video traffic data so as to exclude the transmission of other small traffic resources, and then the number proportion of the uplink traffic data and the statistical characteristics of the time-division transmission of the downlink traffic data are further utilized for accurately judging, so that the identification efficiency can be improved.
As for the preset rate threshold of the transmission rate, those skilled in the art can select and set the preset rate threshold according to practical application, which is not limited in this application. For example, a typical video file that can be smoothly played has a transmission rate of at least 40kB/s, and therefore, the preset rate threshold may be set to 40kB/s.
As a preferred embodiment, before determining whether the traffic data meets the video traffic statistics, the method further comprises:
judging whether the TCP connection is a TCP short connection or not;
if not, continuing to execute the step of judging whether the flow data accords with the video flow statistical characteristics;
if yes, judging the flow data corresponding to the TCP connection as non-video flow data.
Specifically, TCP connections in network communications have both short and long connections. The short connection means that the client and the server are connected by HTTP operation only once each time, namely the short connection is disconnected immediately after the data is sent once; the long connection is not actively closed after completing one data transfer, but rather continues with the following data transfer operations.
Because of the coherent property of the video file during playing, the access playing of the video file is realized by adopting long connection. Therefore, before the determination is made using the statistical characteristics of the traffic data, it is also possible to determine whether or not the TCP connection is a short connection. If the TCP connection is a short connection, it will not be a TCP connection that accesses video files, and the traffic data generated will be non-video traffic data; if the TCP connection is a long connection, the next step can be continued, the partial flow data generated in the long connection is judged by utilizing the video flow statistical characteristics, and once the characteristics are found to be matched, the flow data in the long connection can be identified as video flow data.
In practice, the short connection will automatically close after a single data transmission, so the short connection and the long connection are easily distinguished, and can naturally be determined to be a long connection as long as the TCP connection is not automatically closed.
As a preferred embodiment, after determining that the traffic data corresponding to the TCP connection are all video traffic data, the method further includes:
the TCP connection is disconnected to terminate the transmission of the traffic data.
Specifically, after determining that the TCP connection currently being targeted is one that generates video traffic data corresponding to a video file, the TCP connection may be disconnected to prevent user access to the video file, i.e., to terminate traffic data transmission. The transmission of the traffic data in the TCP connection may be interrupted by those skilled in the art specifically adopting the technical means of packet loss, sending a reset packet, etc., which is not limited in this application.
In one embodiment, please refer to fig. 3, fig. 3 is a flowchart of another method for identifying video traffic data provided in the present application, which includes the following steps:
step 31: when detecting that a server establishes a TCP connection for a network access request of a client and transmits traffic data with the client through the TCP connection, judging whether the TCP connection is a TCP short connection or not; if not, go to step 32; if so, step 36 is entered.
Specifically, as described above, before the statistical feature inspection is performed on the traffic data of the established TCP connection, whether the TCP connection is a TCP short connection or a TCP long connection may be determined, and the TCP short connection may directly skip the subsequent statistical feature inspection to determine as non-video traffic data.
Step 32: judging whether the transmission rate of downlink flow data in the flow data is higher than a preset rate threshold value or not; if yes, go to step 33; if not, go to step 36.
Specifically, for the determined TCP long connection, it may be observed whether the transmission rate of the downstream traffic data in the traffic data is higher than a preset rate threshold, and if not, the subsequent statistical feature inspection may be skipped to determine that the traffic data is non-video traffic data.
Step 33: judging whether the uplink flow data in the flow data is smaller than the preset quantity proportion and the downlink flow data is transmitted in a time-sharing mode; if yes, go to step 34; if not, go to step 36.
Specifically, if the traffic data of the TCP long connection accords with the statistical characteristic of the video traffic data, that is, the uplink traffic data is smaller than the preset quantity proportion and the downlink traffic data is transmitted in a time-division manner, it may be determined that the resource file corresponding to the TCP connection is a video file, and the generated traffic data are all video traffic data.
Step 34: judging that the flow data corresponding to the TCP connection are all video flow data; step 35 is entered.
Step 35: the TCP connection is disconnected to terminate the transmission of traffic data.
Step 36: traffic data corresponding to the TCP connection is determined to be non-video traffic data.
The following describes the identification method shown in fig. 3 with respect to a specific identification case of a client accessing facebook video. Firstly, in step 31, the access controller obtains the result that the TCP connection is a long TCP connection, then proceeds to step 32, and also obtains the result that the transmission rate of the downstream traffic data in the traffic data is higher than the preset rate threshold (40 kB/s in this case), then proceeds to step 33, and through statistics, the ratio of the downstream traffic data to the upstream traffic data is basically stabilized to be greater than 10 times, which means that the ratio of the downstream traffic data to the upstream traffic data is smaller than the preset number ratio (10% in this case), and the downstream traffic data is divided into multiple segments, specifically into one segment every 700kB, so it can be seen that the traffic data of the TCP is the traffic data conforming to the statistical characteristics of the video traffic data, and thus it can be determined in step 34 that the traffic data corresponding to the TCP connection is the video traffic data, and proceeds to step 35 to intercept the transmission of the traffic data of the TCP connection.
The following describes a device for identifying video traffic data provided in an embodiment of the present application.
Referring to fig. 4, fig. 4 is a block diagram of an identification device for video traffic data provided in the present application; comprises a detection module 41 and a judgment module 42;
when the detection module 41 detects that the server side establishes a TCP connection for a network access request of the client side and transmits traffic data with the client side through the TCP connection, the judgment module 42 is configured to judge whether the traffic data accords with the video traffic statistic feature; if yes, judging that the flow data corresponding to the TCP connection are all video flow data.
As can be seen, the identification device for video traffic data provided in the present application does not use DNS or an authentication certificate as identification information of video traffic data as in the prior art, but rather respectively judges traffic data of different TCP connections under the same DNS, that is, uses traffic data in the same TCP connection as a processing unit, identifies a TCP connection that has transmitted traffic data partially conforming to the video traffic statistics feature based on a feature statistics method, so that the TCP connection is judged as a network connection corresponding to video network resources, and the transmitted traffic data is judged as video traffic data, so that blocking of video traffic data can be performed for the TCP connection. The method and the device do not block traffic data aiming at the DNS or the authentication certificate, so that normal use of other network resources sharing the same DNS with the video resource file can be effectively ensured.
The recognition device for video traffic data provided by the application is based on the above embodiment:
as a preferred embodiment, the judging module 42 is specifically configured to:
and judging whether the flow data corresponding to the TCP connection accords with the video flow statistical characteristics that the uplink flow data is smaller than the preset quantity proportion and the downlink flow data is transmitted in a time-sharing mode.
As a preferred embodiment, the determining module 42 is further specifically configured to, before determining whether the traffic data corresponding to the TCP connection matches the video traffic statistics feature that the upstream traffic data is smaller than the preset number proportion and the downstream traffic data is transmitted in time periods:
judging whether the flow data corresponding to the TCP connection accords with the video flow statistical characteristics that the transmission rate of the downlink flow data is higher than a preset rate threshold value; if yes, the method continues to be used for judging whether the flow data corresponding to the TCP connection accords with the video flow statistical characteristics that the uplink flow data is smaller than the preset quantity proportion and the downlink flow data is transmitted in a time-sharing mode.
As a preferred embodiment, the determining module 42 is further configured to, prior to determining whether the traffic data meets the video traffic statistics:
judging whether the TCP connection is a TCP short connection or not;
if not, continuing to judge whether the flow data accords with the video flow statistical characteristics;
if yes, judging the flow data corresponding to the TCP connection as non-video flow data.
As a preferred embodiment, further comprising:
the processing module is used for: for disconnecting the TCP connection to terminate the transmission of the traffic data after the judging module 42 judges that the traffic data corresponding to the TCP connection are all video traffic data.
The application also provides an identification device for video flow data, comprising:
a memory: for storing a computer program;
a processor: steps for executing a computer program to implement any of the video traffic data identification methods described above.
The present application also provides a computer readable storage medium having stored therein a computer program which when executed by a processor is adapted to carry out the steps of any of the video traffic data identification methods described above.
Specific embodiments of the apparatus, device and computer readable storage medium for identifying video traffic data provided in the present application and the method for identifying video traffic data described above may be referred to correspondingly, and will not be described herein again.
In this application, each embodiment is described in a progressive manner, and each embodiment focuses on a difference from other embodiments, and identical and similar parts between the embodiments are all enough to refer to each other. For the embodiment disclosure, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant points refer to the description of the method section.
It should also be noted that in this document, relational terms such as "first" and "second" are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Furthermore, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.
The technical scheme provided by the application is described in detail. Specific examples are set forth herein to illustrate the principles and embodiments of the present application, and the description of the examples above is only intended to assist in understanding the methods of the present application and their core ideas. It should be noted that it would be obvious to those skilled in the art that various improvements and modifications can be made to the present application without departing from the principles of the present application, and such improvements and modifications fall within the scope of the claims of the present application.
Claims (9)
1. A method for identifying video traffic data, comprising:
when detecting that a server establishes a TCP connection for a network access request of a client and transmits traffic data with the client through the TCP connection, judging whether the traffic data accords with a video traffic statistical characteristic or not;
if yes, judging that the flow data corresponding to the TCP connection are all video flow data;
before the judging whether the flow data accords with the video flow statistical characteristics, the method further comprises the following steps:
judging whether the TCP connection is a TCP short connection or not;
if not, continuing to execute the step of judging whether the flow data accords with the video flow statistical characteristics;
if yes, judging that the flow data corresponding to the TCP connection is non-video flow data.
2. The identification method of claim 1, wherein the video traffic statistics feature comprises:
the uplink flow data in the flow data is smaller than the preset quantity proportion, and the downlink flow data is transmitted in a time-sharing mode.
3. The identification method of claim 2, wherein the video traffic statistics further comprise:
and the transmission rate of the downlink flow data is higher than a preset rate threshold.
4. A method of identifying according to any one of claims 1 to 3, further comprising, after said determining that said traffic data corresponding to said TCP connection is video traffic data:
disconnecting the TCP connection to terminate transmission of the traffic data.
5. A method of identification as claimed in claim 2 or 3, wherein the predetermined quantity ratio is 10%.
6. The device for identifying the video flow data is characterized by comprising a detection module and a judgment module;
when the detection module detects that a TCP connection is established by a server for a network access request of a client and traffic data is transmitted with the client through the TCP connection, the judgment module is used for judging whether the traffic data accords with the video traffic statistical characteristic; if yes, judging that the flow data corresponding to the TCP connection are all video flow data;
the judging module is further configured to execute the following steps before judging whether the traffic data accords with the video traffic statistical feature:
judging whether the TCP connection is a TCP short connection or not;
if not, continuing to judge whether the flow data accords with the video flow statistical characteristics;
if yes, judging the flow data corresponding to the TCP connection as non-video flow data.
7. The identification device of claim 6, further comprising:
the processing module is used for: and the judging module is used for disconnecting the TCP connection so as to terminate the transmission of the traffic data after judging that the traffic data corresponding to the TCP connection are all video traffic data.
8. An identification device for video traffic data, comprising:
a memory: for storing a computer program;
a processor: steps for executing the computer program to implement the method of identifying video traffic data according to any of claims 1 to 5.
9. A computer readable storage medium, characterized in that the computer readable storage medium has stored therein a computer program which, when executed by a processor, is adapted to carry out the steps of the method for identifying video traffic data according to any one of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811141045.5A CN110971530B (en) | 2018-09-28 | 2018-09-28 | Video traffic data identification method, device and equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811141045.5A CN110971530B (en) | 2018-09-28 | 2018-09-28 | Video traffic data identification method, device and equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN110971530A CN110971530A (en) | 2020-04-07 |
| CN110971530B true CN110971530B (en) | 2023-07-14 |
Family
ID=70027747
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811141045.5A Active CN110971530B (en) | 2018-09-28 | 2018-09-28 | Video traffic data identification method, device and equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110971530B (en) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101267353A (en) * | 2008-04-24 | 2008-09-17 | 北京大学 | A Payload-Independent Method for Detecting Network Abuse Behavior |
| CN103036743A (en) * | 2012-12-19 | 2013-04-10 | 中国科学院信息工程研究所 | Transmission control protocol (TCP) heartbeat detecting method of spy trojan |
| WO2014114361A1 (en) * | 2013-01-28 | 2014-07-31 | Telefonaktiebolaget L M Ericsson (Publ) | Method, apparatus and computer program for providing a data object from a content server to a client device over a radio access network (ran) |
| CN105791151A (en) * | 2014-12-22 | 2016-07-20 | 华为技术有限公司 | A dynamic flow control method and device |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102111814A (en) * | 2010-12-29 | 2011-06-29 | 华为技术有限公司 | Method, device and system for identifying service type |
| US10320689B2 (en) * | 2016-05-24 | 2019-06-11 | International Business Machines Corporation | Managing data traffic according to data stream analysis |
| CN107528837B (en) * | 2017-08-17 | 2020-06-09 | 深信服科技股份有限公司 | Encrypted video identification method and device, computer device and readable storage medium |
| CN108040091B (en) * | 2017-11-27 | 2022-07-01 | 腾讯数码（天津）有限公司 | Data processing method, device and storage medium |
-
2018
- 2018-09-28 CN CN201811141045.5A patent/CN110971530B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101267353A (en) * | 2008-04-24 | 2008-09-17 | 北京大学 | A Payload-Independent Method for Detecting Network Abuse Behavior |
| CN103036743A (en) * | 2012-12-19 | 2013-04-10 | 中国科学院信息工程研究所 | Transmission control protocol (TCP) heartbeat detecting method of spy trojan |
| WO2014114361A1 (en) * | 2013-01-28 | 2014-07-31 | Telefonaktiebolaget L M Ericsson (Publ) | Method, apparatus and computer program for providing a data object from a content server to a client device over a radio access network (ran) |
| CN105791151A (en) * | 2014-12-22 | 2016-07-20 | 华为技术有限公司 | A dynamic flow control method and device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN110971530A (en) | 2020-04-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| KR100959523B1 (en) | Service quality management method for users and system for performing the same | |
| CN107683600B (en) | System and method for managing ABR bitrate delivery in response to client's video buffer characteristics | |
| US10069885B2 (en) | Bandwidth management for over-the-top adaptive streaming | |
| CN103731887A (en) | Network bandwidth adjusting method, mobile terminal and server | |
| US9722889B2 (en) | Facilitating high quality network delivery of content over a network | |
| US11843532B2 (en) | Application peering | |
| US20140095729A1 (en) | Client-side class-of-service-based bandwidth management in over-the-top video delivery | |
| US20150109909A1 (en) | User-based profiling and network access | |
| US20140181245A1 (en) | Method and apparatus for content delivery over a broadcast network | |
| US20200092213A1 (en) | System, apparatuses and method for traffic profiling of mobile video streaming | |
| CN107689928A (en) | Data service handling method and device | |
| CN109547172A (en) | Data transmission method, system and data transmitting equipment, data receiver | |
| CN106230741A (en) | A kind of method and apparatus that message is carried out speed limit | |
| US9900639B2 (en) | Temporary viewer access to videos from programmers while multichannel video programming distributors are unavailable for authentication and authorization | |
| WO2016169600A1 (en) | Technique for scheduling transmission of content in an access network | |
| AU2016256803A1 (en) | Automatically determining restored availability of multi-channel media distributors for authentication or authorization | |
| CN110971530B (en) | Video traffic data identification method, device and equipment | |
| KR102172056B1 (en) | Control method, apparatus and program of token-based caching system including icn router and content provider terminal | |
| US20160080276A1 (en) | Methods and arrangement for adapting quality of service for a private channel based on service awareness | |
| JP6743906B2 (en) | Communication device, communication method, program | |
| CN102893561B (en) | A kind of method of Service control, the network equipment, content server and system | |
| CN112448939A (en) | Safety protection method, device and storage medium | |
| JP6878451B2 (en) | Asynchronous analysis of data stream | |
| US9755917B2 (en) | Method and apparatus for service aware charging and control in a communication network | |
| US11800423B2 (en) | System and method for automatically switching real-time communication device to new basic service set |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |