【摘要】 BitTorrent是P2P类协议典型代表,国内目前很流行、使用人数很多。它使用动态端口,同时将本身的流量伪装成为HTTP流量。传统的网络级防火墙(包过滤)缺少对应用层(OSI模型的第7层)流量的分析,因此无法识别BitTorrent下载的流量。本文提出了一种基于Linux Netfilter连接跟踪机制的BitTorrent数据识别和控制的方法,可以根据应用层数据识别BT连接,并可以通过设置相应的过滤规则控制BT流量,从而提高网络性能,并通过实验进行验证。更多还原

【Abstract】 BitTorrent is a sample of P2P and it has been the most popular P2P in Mainland China.It uses dynamic ports and masquerade its traffics as HTTP traffics.Traditional packet filtering firewalls are unable to identify the BitTorrent download traffics for their incapability of application layer data analysis.This paper presents the method of BitTorrent traffic identification,which controls based on Netfilter connection tracking mechanism in Linux System.The identification of BitTorrent connection according to the application layer data,and the management of BT traffic could be realized by some appropriate firewall filter rules.Thus,the load of network resources could be alleviated,and the performance be enhanced largely.The paper presents an experiment to testify the availability of the method.更多还原