摘要 |
The disclosure discloses a method and system for complex flow classification of fragmented packets. To solve the problem of incapable of processing the non-initial fragments with the same actions as the initial fragment, the disclosure provides a method for complex flow classification of fragmented packets. The method includes determining whether a received fragment is an initial fragment, if the received fragment is an initial fragment, storing the initial fragment information and processing it, otherwise, looking for the matched initial fragment information, and performing the same action processing as the initial fragment. The disclosure also provides a system for complex flow classification of fragmented packets. The system includes a determining module, an initial fragment processing module and a non-initial fragment processing module. The application of the techniques provided in embodiments of the disclosure effectively solve the problem of complex flow classification of the fragmented packets based on the transport layer, thereby processing the initial fragment and its non-initial fragments with the same actions.
|