Warning: pg_query(): Query failed: ERROR: missing chunk number 0 for toast value 29512337 in pg_toast_2619 in /dati/webiit-old/includes/database.pgsql.inc on line 138 Warning: ERROR: missing chunk number 0 for toast value 29512337 in pg_toast_2619 query: SELECT data, created, headers, expire, serialized FROM cache_page WHERE cid = 'https://www-old.iit.cnr.it/en/node/30838' in /dati/webiit-old/includes/database.pgsql.inc on line 159 Warning: pg_query(): Query failed: ERROR: missing chunk number 0 for toast value 29512337 in pg_toast_2619 in /dati/webiit-old/includes/database.pgsql.inc on line 138 Warning: ERROR: missing chunk number 0 for toast value 29512337 in pg_toast_2619 query: SELECT data, created, headers, expire, serialized FROM cache_page WHERE cid = 'https://www-old.iit.cnr.it/en/node/30838' in /dati/webiit-old/includes/database.pgsql.inc on line 159 nDPI: Open-Source High-Speed Deep Packet Inspection | IIT - CNR - Istituto di Informatica e Telematica
IIT Home Page CNR Home Page

nDPI: Open-Source High-Speed Deep Packet Inspection

Network traffic analysis has been traditionallylimited to packet header as the transport protocol andapplication ports were usually enough to identify the applicationprotocol. With the advent of port-independent, peer-to-peer andencrypted protocols, the task of identifying application protocolshas become increasingly challenging, thus paving the way to thecreation of tools and libraries for network protocol classification.This paper covers the design and implementation of nDPI, anopen-source library for the protocol classification through theanalysis of both packet header and payload. nDPI has beenvalidated extensively in various monitoring projects rangingfrom Linux kernel protocol classification, to analysis ofsuspicious communications targeting the .it ccTLD.


TRAC 2014, Nicosia, 2014

External authors: Alfredo Cardigliano (ntop)
IIT authors:

Type: Article in proceedings of international conference
Field of reference: Information Technology and Communication Systems