现代电子技术
現代電子技術
현대전자기술
MODERN ELECTRONICS TECHNIQUE
2014年
21期
19-23
,共5页
协议解析%多元通联关系%正则表达式%飞信协议识别
協議解析%多元通聯關繫%正則錶達式%飛信協議識彆
협의해석%다원통련관계%정칙표체식%비신협의식별
protocol analysis%conversation relationship%regular expression%Fetion%protocol identification
针对飞信协议尚未公开与复杂互联网环境带来的飞信各类应用相关协议识别困难以及单包通联关系缺失等问题，基于SIP协议的基本框架，从文本聊天、文件传输以及音/视频通信三方面解析了飞信常用业务的协议交互过程；提出了端口与正则表达式相结合的飞信协议识别方法和基于会话还原的飞信通联关系提取方法，能够从大量混杂的数据包中快速定位飞信业务报文，获得飞信多种通信行为的通联关系。实验结果证明了本文方法的有效性。
針對飛信協議尚未公開與複雜互聯網環境帶來的飛信各類應用相關協議識彆睏難以及單包通聯關繫缺失等問題，基于SIP協議的基本框架，從文本聊天、文件傳輸以及音/視頻通信三方麵解析瞭飛信常用業務的協議交互過程；提齣瞭耑口與正則錶達式相結閤的飛信協議識彆方法和基于會話還原的飛信通聯關繫提取方法，能夠從大量混雜的數據包中快速定位飛信業務報文，穫得飛信多種通信行為的通聯關繫。實驗結果證明瞭本文方法的有效性。
침대비신협의상미공개여복잡호련망배경대래적비신각류응용상관협의식별곤난이급단포통련관계결실등문제，기우SIP협의적기본광가，종문본료천、문건전수이급음/시빈통신삼방면해석료비신상용업무적협의교호과정；제출료단구여정칙표체식상결합적비신협의식별방법화기우회화환원적비신통련관계제취방법，능구종대량혼잡적수거포중쾌속정위비신업무보문，획득비신다충통신행위적통련관계。실험결과증명료본문방법적유효성。
As the protocols of Fetion are not public,it is difficult to recognize the Fetion application protocals caused by complex Internet environment and single-package conversation relationship is deficient,three common business protocol proce-dures(text messaging,file transfer and audio/video communication)are parsed on the basis of the basic framework of SIP protocol. The Fetion conversation relationship extraction method based on conversation revivification and protocol identification method of combining port and regular expressions are proposed for quickly locating Fetion service packets in promiscuous raw packets to achieve variety business relationships. Experimental results demonstratd the effectiveness of the method.
