Detection of encrypted packet streams using feedback probing

摘要

Methods, systems, and devices are disclosed for detecting encrypted Internet Protocol packet streams. A probe stream having a known observable parameter is generated. The observable parameter exhibits a known characteristic of a known type of data encrypted within a stream of packets. The probe stream is communicated to a network element via a communications network. When the probe stream is received by the network element, the network element can compare the known observable parameter to an actual value. Any difference between the known observable parameter and the actual value can be used to correct for network-induced variation and other effects, thus ensuring accurate detection and identification of data types within encrypted streams of packets.

主权项

1. A method comprising:
measuring variation in a time interval between probe stream adjacent packets using an inserted known observable parameter as part of a probe stream transmitted via a communications network to determine a network-induced time variation; changing a time interval inserted between subsequent actual data packets transmitted via the communications network based on the network-induced time variation; periodically generating respective probe streams corresponding to respective zones within the communications network; and periodically transmitting the respective probe streams from different ones of the respective zones within the communications network to other ones of the respective zones within the communications network to determine respective zone network-induced time variations.