TECHNIQUE FOR CLASSIFYING NETWORK TRAFFIC AND FOR VALIDATING A MECHANISM FOR CLASSIFYING NETWORK TRAFFIC
First Claim
1. A method (200) for classifying network traffic in the form of data packets generated by multiple applications installed on a device, the method comprising the following steps performed by the device:
- receiving (205) data packets belonging to one or more data flows, each data flow including the data packets generated by a specific one of the multiple applications;
analyzing (210) the received data packets to identify the application associated with each analyzed data packet; and
classifying (215) at least one data flow by including an application identifier in at least one of the analyzed data packets of this data flow.
1 Assignment
0 Petitions
Accused Products
Abstract
A technique for classifying network traffic in the form of data packets generated by multiple applications installed on a device (400) is provided. A method implementation of this technique performed by the device (400) comprises the steps of receiving data packets belonging to one or more data flows, wherein each data flow includes the data packets generated by a specific one of the multiple applications, analyzing the received data packets to identify the application associated with each analyzed data packet, and classifying at least one data flow by including an application identifier in at least one of the analyzed data packets of this data flow.
-
Citations
25 Claims
-
1. A method (200) for classifying network traffic in the form of data packets generated by multiple applications installed on a device, the method comprising the following steps performed by the device:
-
receiving (205) data packets belonging to one or more data flows, each data flow including the data packets generated by a specific one of the multiple applications; analyzing (210) the received data packets to identify the application associated with each analyzed data packet; and classifying (215) at least one data flow by including an application identifier in at least one of the analyzed data packets of this data flow. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 19, 20)
-
-
18. A method of validating a mechanism for classifying network traffic, comprising the following steps:
-
receiving (705) at least one data flow of the network traffic, the data flow comprising data packets and at least one of the data packets of the data flow including an application identifier assigned to the data flow in accordance with a first mechanism for classifying network traffic, the application identifier classifying the data flow with respect to an application that has generated the data flow; analyzing (710) at least one of the data packets of the received data flow in order to determine a first classification of the data flow based on an application identifier included in the analyzed data packet; providing (715) a second classification of the data flow by means of a second mechanism for classifying network traffic that is different from the first mechanism for classifying network traffic; and validating (720) the second classification mechanism for classifying network traffic by comparing the first and the second classifications.
-
-
21. A device (100) for classifying network traffic in the form of data packets generated by multiple applications installed on the device, comprising:
-
a function (135) for receiving data packets belonging to one or more data flows, each data flow including the data packets generated by a specific one of the multiple applications; a function (140) for analyzing the received data packets to identify the application associated with each analyzed data packet; and a function (145) for classifying at least one data flow by including an application identifier in at least one of the analyzed data packets of this data flow. - View Dependent Claims (22, 23)
-
-
24. An apparatus (600) for validating a mechanism for classifying network traffic, comprising:
-
a function (615) for receiving at least one data flow of the network traffic, the data flow comprising data packets and at least one of the data packets of the data flow including an application identifier assigned to the data flow in accordance with a first mechanism for classifying network traffic, the application identifier classifying the data flow with respect to an application that has generated the data flow; a function (620) for analyzing at least one of the data packets of the at least one received data flow in order to determine a first classification of the data flow based on an application identifier included in the analyzed data packet; a function (630) for providing a second classification of the data flow by means of a second mechanism for classifying network traffic that is different from the first mechanism for classifying network traffic; and a function (640) for validating the second classification mechanism for classifying network traffic by comparing the first and the second classifications. - View Dependent Claims (25)
-
Specification