Method for protocol recognition and analysis in data networks

摘要

The method uses a network for protocol self identification for recognizing determinative data by the naming given among data transmitted through a detected connection, and an empty or nonempty list of protocol usable namings called son protocols associated with each usable protocol naming called a father protocol. The kernel of an information system associates to each detected connection a data structure arranged so that it comprises an ordered sequence of the used protocol namings. The kernel builds the data structure by retrieving the son protocol namings in the list associated to the last naming of said ordered sequence, the son protocol naming for which the associated self identification mechanism recognizes determinant data among transmitted data by adding the retrieved son protocol naming to the end of the sequence and by restarting to retrieve the son protocol naming for which the associated self identification mechanism recognizes determinant data among transmitted data.