Science and Development Network (SciDev.Net)
With the rapid development of the Internet, identifying classifications of protocols are required. Traditional approaches to application-layer protocol identification are mainly achieved on the base of protocol ports defined by the IANA. Haffner proposed an automatic method to extract network traffic characteristics of application-layer protocols. However, currently many communication protocols are using dynamic ports. To solve this problem, researchers have proposed improved identification approach, based on deep packet inspection. However, the efficiency and reliability of manual analysis are relative low. Therefore, the authors present a solution of automatic protocol feature extraction.