nDPI: Open-Source High-Speed Deep Packet Inspection

Publication: Research - peer-reviewArticle in proceeding

Abstract

Network traffic analysis was traditionally limited to packet header, because the transport protocol and application ports were usually sufficient to identify the application protocol. With the advent of port-independent, peer-to-peer, and encrypted protocols, the task of identifying application protocols became increasingly challenging, thus creating a motivation for creating tools and libraries for network protocol classification. This paper covers the design and implementation of nDPI, an open-source library for protocol classification using both packet header and payload. nDPI was extensively validated in various monitoring projects ranging from Linux kernel protocol classification, to analysis of 10 Gbit traffic, reporting both high protocol detection accuracy and efficiency.
Close

Details

Network traffic analysis was traditionally limited to packet header, because the transport protocol and application ports were usually sufficient to identify the application protocol. With the advent of port-independent, peer-to-peer, and encrypted protocols, the task of identifying application protocols became increasingly challenging, thus creating a motivation for creating tools and libraries for network protocol classification. This paper covers the design and implementation of nDPI, an open-source library for protocol classification using both packet header and payload. nDPI was extensively validated in various monitoring projects ranging from Linux kernel protocol classification, to analysis of 10 Gbit traffic, reporting both high protocol detection accuracy and efficiency.
Original languageEnglish
Title of host publicationWireless Communications and Mobile Computing Conference (IWCMC), 2014 International
PublisherIEEE
Publication date2014
Pages617-622
ISBN (print)978-1-4799-7324-8
DOI
StatePublished - 2014
EventInternational Wireless Communications and Mobile Computing Conference - Nicosia, Cyprus

Conference

ConferenceInternational Wireless Communications and Mobile Computing Conference
Nummer10th
LandCyprus
ByNicosia
Periode04/08/201408/08/2014
SeriesWireless Communications and Mobile Computing (Print)
ISSN1530-8669
ID: 202328298