DNS PROTOCOL-BASED METHOD AND SYSTEM FOR IDENTIFYING P2P PROTOCOL

摘要

The present invention relates to the field of the Internet. Disclosed are a DNS protocol-based method and system for identifying a P2P protocol. The method comprises: extracting domain name keywords of different applications employing the P2P protocol, compiling into a feature library; scanning a DNS request of a host, determining whether or not a domain name for which parsing is requested matches the domain name keyword of a currently parsing-pending application, if yes, recording an IP address parsed by a DNS, executing the next step, and if not, repeating the present step; determining whether or not a UDP connection destined to the IP address is present, if yes, recording a corresponding UDP source port, executing the next step, and if not, repeating the present step; and, identifying the connection established by the host via the UDP source port as the connection corresponding to the currently parsing-pending application employing the P2P protocol. The method and system efficiently and accurately complete the identification of the application employing the P2P protocol, thus are instrumental in implementing effective control of network traffic.