[go: up one dir, main page]

CN119254862A - Data packet identification method, device, equipment and medium based on voice communication - Google Patents

Data packet identification method, device, equipment and medium based on voice communication Download PDF

Info

Publication number
CN119254862A
CN119254862A CN202411757827.7A CN202411757827A CN119254862A CN 119254862 A CN119254862 A CN 119254862A CN 202411757827 A CN202411757827 A CN 202411757827A CN 119254862 A CN119254862 A CN 119254862A
Authority
CN
China
Prior art keywords
data packet
identified
protocol version
protocol
packet
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202411757827.7A
Other languages
Chinese (zh)
Other versions
CN119254862B (en
Inventor
赖远萱
夏聪
邹远华
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nexwise Intelligence China Ltd
Original Assignee
Nexwise Intelligence China Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nexwise Intelligence China Ltd filed Critical Nexwise Intelligence China Ltd
Priority to CN202411757827.7A priority Critical patent/CN119254862B/en
Publication of CN119254862A publication Critical patent/CN119254862A/en
Application granted granted Critical
Publication of CN119254862B publication Critical patent/CN119254862B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention provides a data packet identification method, a device, equipment and a medium based on voice communication, which relate to the technical field of communication and comprise the steps of receiving a data packet to be identified, determining a used protocol version based on a value of a protocol version field of the data packet, determining whether the used protocol version is a valid data packet based on a payload length of the data packet if the used protocol version is an IP protocol version, determining a used bearer protocol type based on a value of a bearer protocol field of the data packet if the used protocol version is a valid data packet, determining the used bearer protocol type if the used bearer protocol type is a target protocol type, and determining the used bearer protocol type as an IP packet if the used protocol version of the data packet is not the IP protocol version or is an invalid data packet or the used bearer protocol type is not the target protocol type. When the invention receives the communication data for analysis processing, the communication transmission mechanism adopted by the two communication parties can be determined without depending on the context interaction of the two communication parties, and the analysis processing efficiency of the communication data is improved.

Description

Data packet identification method, device, equipment and medium based on voice communication
Technical Field
The present invention relates to the field of communications technologies, and in particular, to a method, an apparatus, a device, and a medium for identifying a data packet based on voice communication.
Background
The current mainstream mobile communication systems are Long Term Evolution (Long Term Evolution, LTE) and New Radio (NR), which all use internet protocol (Internet Protocol, IP) bearers to transmit Voice, called Long Term Evolution (Voice over Long-Term Evolution (VoLTE)) or New Radio (Voice over New Radio, voNR). In the voice transmission realization, voice data can be compressed (Robust Header Compression, ROHC) by adopting a robust header, so that the transmission cost brought by an IP header is reduced, and the IP transmission can be directly adopted instead of the ROHC header compression, so that the realization complexity is reduced.
In the mobile communication process, both communication parties can determine whether the voice transmission adopts ROHC header compression or IP transmission directly through signaling negotiation. The communication double party can determine the communication transmission mechanism according to the negotiation result.
However, in some scenarios, the communication party may not receive the negotiation signaling, which results in a problem that the communication transmission mechanism adopted by the communication party cannot be determined when the received communication data is analyzed and processed.
Disclosure of Invention
The invention provides a data packet identification method, a device, equipment and a medium based on voice communication, which are used for solving the defect that a communication party can not receive negotiation signaling in the prior art, so that a communication transmission mechanism adopted by both communication parties cannot be determined when received communication data is analyzed and processed, and realizing that when the received communication data is analyzed and processed, only information carried in a data packet to be identified is used for carrying out IP packet detection and identification, and the communication transmission mechanism adopted by both communication parties can be determined without depending on context interaction information of both communication parties, thereby improving the analysis and processing efficiency of the communication data.
The invention provides a data packet identification method based on voice communication, which comprises the following steps:
receiving a data packet to be identified, and determining a protocol version used by the data packet to be identified based on the value of a protocol version field of the data packet to be identified;
If the protocol version used by the data packet to be identified is an IP protocol version, determining whether the data packet to be identified is a valid data packet or not based on the load length of the data packet to be identified;
If the data packet to be identified is a valid data packet, determining the type of the bearer protocol used by the data packet to be identified based on the value of the bearer protocol field of the data packet to be identified;
If the type of the bearing protocol used by the data packet to be identified is the target protocol type, determining that the data packet to be identified is an IP packet;
And if the protocol version used by the data packet to be identified is not an IP protocol version, or the data packet to be identified is an invalid data packet, or the bearer protocol type used by the data packet to be identified is not a target protocol type, determining that the data packet to be identified is a non-IP packet.
The invention provides a data packet identification method based on voice communication, wherein the IP protocol version comprises an IPV4 protocol version and an IPV6 protocol version, and the method for determining the protocol version used by the data packet to be identified based on the value of the protocol version field of the data packet to be identified comprises the following steps:
extracting the first byte high four-bit data of the data packet to be identified to obtain a protocol version field of the data packet to be identified;
if the value of the protocol version field is 4, determining that the protocol version used by the data packet to be identified is an IPV4 protocol version;
and if the value of the protocol version field is 6, determining that the protocol version used by the data packet to be identified is an IPV6 protocol version.
According to the method for identifying a data packet based on voice communication provided by the present invention, if the protocol version used by the data packet to be identified is an IP protocol version, determining whether the data packet to be identified is a valid data packet based on the payload length of the data packet to be identified includes:
If the protocol version used by the data packet to be identified is an IPV4 protocol version, calculating the load length of the data packet to be identified based on the total length and the head length of the data packet to be identified;
if the protocol version used by the data packet to be identified is an IPV6 protocol version, determining the load length of the data packet to be identified based on the value of the load length field of the data packet to be identified;
and if the load length of the data packet to be identified is greater than the minimum load length threshold value, determining that the data packet to be identified is a valid data packet.
According to the method for identifying the data packet based on voice communication provided by the invention, the load length of the data packet to be identified is calculated based on the total length and the head length of the data packet to be identified, and the method comprises the following steps:
Extracting the first byte low four-bit data of the data packet to be identified to obtain a header length field of the data packet to be identified;
Determining the header length of the data packet to be identified based on the value of the header length field;
And carrying out difference value calculation on the total length and the head length of the data packet to be identified to obtain the load length of the data packet to be identified.
According to the method for identifying the data packet based on voice communication provided by the invention, the method for determining the load length of the data packet to be identified based on the value of the load length field of the data packet to be identified comprises the following steps:
Extracting fourth byte data and fifth byte data of the data packet to be identified to obtain a payload length field of the data packet to be identified;
and determining the payload length of the data packet to be identified based on the value of the payload length field.
According to the method for identifying the data packet based on voice communication provided by the invention, the method for determining the type of the bearer protocol used by the data packet to be identified based on the value of the bearer protocol field of the data packet to be identified comprises the following steps:
If the protocol version used by the data packet to be identified is an IPV4 protocol version, extracting ninth byte data of the data packet to be identified to obtain a bearing protocol field of the data packet to be identified;
If the protocol version used by the data packet to be identified is an IPV6 protocol version, extracting sixth byte data of the data packet to be identified to obtain a bearing protocol field of the data packet to be identified;
And determining the type of the bearer protocol used by the data packet to be identified based on the value of the bearer protocol field of the data packet to be identified.
The invention also provides a data packet recognition device based on voice communication, which comprises:
The protocol version determining module is used for receiving the data packet to be identified and determining the protocol version used by the data packet to be identified based on the value of the protocol version field of the data packet to be identified;
The load length determining module is used for determining whether the data packet to be identified is a valid data packet or not based on the load length of the data packet to be identified if the protocol version used by the data packet to be identified is an IP protocol version;
the bearer protocol determining module is used for determining the type of the bearer protocol used by the data packet to be identified based on the value of the bearer protocol field of the data packet to be identified if the data packet to be identified is a valid data packet;
the IP packet determining module is used for determining the data packet to be identified as an IP packet if the type of the bearing protocol used by the data packet to be identified is a target protocol type;
And the non-IP packet determining module is used for determining that the data packet to be identified is a non-IP packet if the protocol version used by the data packet to be identified is not an IP protocol version, or the data packet to be identified is an invalid data packet, or the bearer protocol type used by the data packet to be identified is not a target protocol type.
The invention also provides an electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements the data packet recognition method based on voice communication as described in any one of the above when executing the computer program.
The present invention also provides a non-transitory computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements a voice communication based data packet recognition method as described in any of the above.
The invention also provides a computer program product comprising a computer program which when executed by a processor implements a method of packet recognition based on voice communication as described in any of the above.
According to the data packet identification method, device, equipment and medium based on voice communication, whether the data packet to be identified accords with the IP packet characteristics or not is detected through the protocol version used by the data packet to be identified, the load length of the data packet to be identified and the bearing protocol used by the data packet to be identified, so that whether the data packet to be identified is an IP packet or not is determined, when communication negotiation signaling cannot be received in the voice communication process, when communication data is received for analysis processing, the communication transmission mechanism adopted by both communication parties can be determined only by using the information carried in the data packet to be identified for IP packet detection identification, and the context interaction information of both communication parties is not relied on, so that the efficiency of determining the communication transmission mechanism is improved, and the communication data analysis processing efficiency is further improved.
Drawings
In order to more clearly illustrate the invention or the technical solutions of the prior art, the following description will briefly explain the drawings used in the embodiments or the description of the prior art, and it is obvious that the drawings in the following description are some embodiments of the invention, and other drawings can be obtained according to the drawings without inventive effort for a person skilled in the art.
Fig. 1 is a flow chart of a packet recognition method based on voice communication according to an embodiment of the present invention.
Fig. 2 is a second flowchart of a packet recognition method based on voice communication according to an embodiment of the present invention.
Fig. 3 is a schematic structural diagram of a packet recognition device based on voice communication according to an embodiment of the present invention.
Fig. 4 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the present invention more apparent, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings, and it is apparent that the described embodiments are some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
In the description of the present invention, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. The specific meaning of the above terms in the present invention can be understood by those of ordinary skill in the art according to the specific circumstances.
The following describes a method, apparatus, device and medium for identifying a data packet based on voice communication according to an embodiment of the present invention with reference to fig. 1 to fig. 4.
It should be noted that, all actions of acquiring signals, information or data in the present invention are performed under the condition of conforming to the corresponding data protection rule policy of the country of the location and obtaining the authorization given by the owner of the corresponding device.
In the mobile communication process, both communication parties can determine whether voice transmission adopts an ROHC header compressed packet or directly adopts an IP packet for transmission through signaling negotiation. The communication double party can determine the communication transmission mechanism according to the negotiation result.
However, in some scenarios, for example, the communication quality between the two parties may be poor, the communication receiver may not receive the negotiation signaling, which results in a problem that the communication transmission mechanism adopted by the two parties cannot be determined when the received communication data is analyzed and processed, and in other scenarios, for example, in non-cooperative reception, the communication third party may only passively receive the two parties ' communication data, even in most conditions, only one party's communication data may be received, and the negotiation signaling of the two parties may not be completely received, which results in a problem that the communication transmission mechanism adopted by the two parties cannot be determined when the communication third party receives the two parties ' communication data and performs analysis and processing.
Therefore, the embodiment of the invention can carry out IP packet detection and identification on the received data packet by using the information carried in the data packet to be identified without depending on the context interaction of the two communication parties under the condition that the communication negotiation signaling is not received, thereby determining the communication transmission mechanism adopted by the two communication parties. It should be noted that, when the communication third party performs packet identification by the method provided by the present invention, the packet identification is performed based on the necessary investigation activity of legal permission, or on the premise of conforming to the corresponding data protection rule policy of the country of the location, and obtaining the authorization given by the owner of the corresponding device.
It should be noted that, the non-cooperative receiving scenario in the present invention may refer to a necessary investigation scenario based on legal permission, or a scenario conforming to the corresponding data protection regulation policy of the country of the location. For example, in an emergency communication scenario, i.e., when an emergency such as a natural disaster occurs, related personnel may need to receive communication signals from different sources through a communication device (i.e., a communication third party) to obtain location information or other data and rescue.
Fig. 1 is a flow chart of a packet recognition method based on voice communication according to an embodiment of the present invention. Referring to fig. 1, an embodiment of the present invention provides a method for identifying a data packet based on voice communication, where the method specifically includes the following steps:
step 101, a data packet to be identified is received, and a protocol version used by the data packet to be identified is determined based on a value of a protocol version field of the data packet to be identified.
It should be noted that, the execution body of the data packet recognition method based on voice communication provided by the embodiment of the invention may be an electronic device, a component in the electronic device, an integrated circuit or a chip. The electronic device may be a mobile electronic device or a non-mobile electronic device. Illustratively, the mobile electronic device may be a mobile phone, a tablet computer, a notebook computer, a palm computer, a wearable device, an Ultra-mobile Personal computer (Ultra-mobile Personal Computer, UMPC), a netbook or a Personal digital assistant (Personal DIGITAL ASSISTANT, PDA), and the non-mobile electronic device may be a server, a network attached storage (Network Attached Storage, NAS), a Personal computer (Personal Computer, PC), a Television (Television, TV), a teller machine, a self-service machine, and the like, which is not particularly limited by the embodiments of the present invention.
The communication data packet can be received in the voice communication process, and the embodiment of the invention can identify whether the communication data packet is an IP packet by detecting whether the received communication data packet accords with the IP packet characteristics. If the communication data packet is not the IP packet, whether the communication data packet is an ROHC compressed packet or not can be further identified, whether the communication data packet is the ROHC header compressed packet or not is determined, and therefore a communication transmission mechanism adopted by the communication data can be determined when the communication data is received and analyzed.
In the embodiment of the invention, whether the data packet to be identified accords with the IP packet characteristics can be detected by acquiring the protocol version, the payload length and the bearing protocol used by the data packet to be identified so as to determine whether the data packet to be identified is an IP packet.
The IP protocol may have multiple protocol versions and the protocol version field in the IP packet header may indicate which version the data packet uses. In the embodiment of the invention, the value of the protocol version field of the data packet to be identified can be extracted, the protocol version used by the data packet to be identified is determined, and whether the protocol version used by the data packet to be identified is an IP protocol version or not is judged, so that whether the data packet to be identified accords with the IP packet characteristic or not is primarily judged based on the protocol version.
Step 102, if the protocol version used by the data packet to be identified is an IP protocol version, determining whether the data packet to be identified is a valid data packet based on the payload length of the data packet to be identified.
The payload length may be the length of the payload actually carried in the data packet, and the payload may refer to the data portion of the communication transmission. The payload length of IP packets carrying complete payload data is typically not too short. In the voice communication process, the embodiment of the invention determines whether the data packet to be identified is the effective data packet or not according to the load length, and can filter the too small data packet, thereby being beneficial to avoiding resource waste and improving data analysis efficiency.
In the embodiment of the invention, if the protocol version used by the data packet to be identified is an IP protocol version, it can be explained that the protocol version of the data packet to be identified accords with the characteristics of the IP packet, and based on the payload length of the data packet to be identified, whether the data packet to be identified is a valid data packet is further judged, so as to reserve the valid data packet, and the invalid data packet is filtered.
Specifically, if the load length of the data packet to be identified is greater than the minimum load length threshold, the data packet to be identified can be indicated as a valid data packet, the load length of the data packet to be identified accords with the IP packet characteristics, and if the load length of the data packet to be identified is less than or equal to the minimum load length threshold, the data packet to be identified can be indicated as an invalid data packet, the load length of the data packet to be identified does not accord with the IP packet characteristics, and the data packet is discarded.
In some embodiments, if the protocol version used by the data packet to be identified is not an IP protocol version, it may be determined that the data packet to be identified does not conform to the IP packet characteristics, and the data packet to be identified is a non-IP packet, that is, the two parties of communication do not directly use the IP packet for voice data transmission.
Step 103, if the data packet to be identified is a valid data packet, determining a bearer protocol type used by the data packet to be identified based on a value of a bearer protocol field of the data packet to be identified.
The bearer protocol may refer to an upper layer transport protocol, and a bearer protocol field in a data packet may be used to indicate a specific upper layer transport protocol type used for data carried by the data packet.
In the embodiment of the invention, if the data packet to be identified is a valid data packet, the value of the bearer protocol field of the data packet to be identified can be extracted, the bearer protocol type used by the data packet to be identified is determined, and whether the bearer protocol type used by the data packet to be identified is a target protocol type is judged, so that whether the data packet to be identified accords with the IP packet characteristic is further judged based on the bearer protocol.
The target protocol type may refer to various types of upper layer transport protocols running on the IP layer. Specifically, if the type of the bearer protocol used by the data packet to be identified is the target protocol type, it may be indicated that the bearer protocol of the data packet to be identified accords with the IP packet characteristics, and if the type of the bearer protocol used by the data packet to be identified is not the target protocol type, it may be indicated that the bearer protocol of the data packet to be identified does not accord with the IP packet characteristics.
Alternatively, the values of the target protocol types may include 50, 6, 17, 58, 59, 60, 41, 42, 43, 44, etc.
A value of 50 for the protocol type may represent an encapsulated security payload protocol (Encapsulating Security Payload, ESP), a security protocol that may be used to provide confidentiality and data integrity.
A value of 6 for the protocol type may represent a transmission control protocol (Transmission Control Protocol, TCP) that may provide reliable, connection-oriented services.
A value of 17 for the protocol type may represent a user datagram protocol (User Datagram Protocol, UDP) that may provide connectionless services suitable for real-time applications or for delay-sensitive scenarios, but that do not require guaranteed integrity.
A value of 58 for the protocol type may represent an internet control information protocol version (Internet Control Message Protocol Version, icmpv 6) for IPv6 control messages and error reporting.
A value of 59 for the protocol type may indicate No Next Header, may indicate that there is No Next Header, and is typically used for IPv6 extension headers.
A value of 60 for the protocol type may represent an Experimental AND RESERVED for Future Use, which may be reserved for Experimental protocols and protocols that may be used in the Future.
A value of 41 for the protocol type may represent IPv6-in-IPv4, a protocol for encapsulating IPv6 packets in IPv 4.
A value of 42 for the protocol type may represent an IPv6 Routing Header for the Header of an IPv6 route, supporting Routing of a specific path in IPv 6.
A value of 43 for the protocol type may represent IPv6 FRAGMENT HEADER for fragmentation of IPv6 packets, ensuring that data can be transferred between different network MTUs.
A value of 44 for the protocol type may represent IPv6 Authentication Header for providing authentication and data integrity in IPv 6.
Step 104, if the bearer protocol type used by the data packet to be identified is the target protocol type, determining that the data packet to be identified is an IP packet.
In the embodiment of the invention, after determining that the protocol version used by the data packet to be identified is an IP protocol version, the data packet to be identified is a valid data packet, and the bearer protocol type used by the data packet to be identified is a target protocol type, the data packet to be identified can be described as conforming to the characteristics of the IP packet, and the data packet to be identified is the IP packet. Therefore, in the voice transmission process, the two communication parties directly adopt the IP packet to carry out data transmission, and the data transmission is carried out by adopting the compressed packet of the ROHC header, so that the communication transmission mechanism adopted by the two communication parties can be determined when the communication data is received for analysis processing.
Step 105, if the protocol version used by the data packet to be identified is not an IP protocol version, or the data packet to be identified is an invalid data packet, or the bearer protocol type used by the data packet to be identified is not a target protocol type, determining that the data packet to be identified is a non-IP packet.
In the embodiment of the invention, in the process of judging whether the data packet to be identified is an IP packet based on the protocol version, the load length and the bearer protocol, if the protocol version used by the data packet to be identified is judged not to be the IP protocol version, or the data packet to be identified is an invalid data packet, or the bearer protocol type used by the data packet to be identified is not the target protocol type, the data packet to be identified can be indicated not to accord with the characteristics of the IP packet and is a non-IP packet. Therefore, in the voice transmission process, the two communication parties do not directly adopt the IP packet for data transmission, whether the communication data packet is an ROHC compressed packet can be further identified, whether the two communication parties adopt the ROHC header compressed packet for data transmission is determined, and therefore the communication transmission mechanism adopted by the two communication parties can be determined when the received communication data is analyzed and processed.
It should be noted that, the above detection of whether the data packet to be identified accords with the IP packet feature through the protocol version, the payload length and the bearer protocol is merely an example of the present invention, and in practical application, it may also be combined with other features of the data packet to perform multidimensional detection and identification on whether the data packet accords with the IP packet feature, thereby improving the identification accuracy of the IP packet, and improving the detection and identification efficiency and accuracy of the communication transmission mechanism adopted by both communication parties.
According to the embodiment of the invention, whether the data packet to be identified accords with the IP packet characteristics or not is detected through the protocol version used by the data packet to be identified, the load length of the data packet to be identified and the bearing protocol used by the data packet to be identified, so that whether the data packet to be identified is an IP packet is determined, and when communication negotiation signaling cannot be received in the voice communication process, the communication transmission mechanism adopted by both communication parties can be determined by only carrying out IP packet detection and identification by using the information carried in the data packet to be identified when the communication data is analyzed and processed, and the efficiency of determining the communication transmission mechanism is improved and the communication data analysis and processing efficiency is further improved without depending on the context interaction information of both communication parties.
Based on any one of the above embodiments, the IP protocol version includes an IPV4 protocol version and an IPV6 protocol version, and the determining, based on the value of the protocol version field of the to-be-identified data packet, the protocol version used by the to-be-identified data packet may specifically include:
Step S11, extracting the first byte high four-bit data of the data packet to be identified to obtain a protocol version field of the data packet to be identified;
Step S12, if the value of the protocol version field is 4, determining that the protocol version used by the data packet to be identified is an IPV4 protocol version;
and step S13, if the value of the protocol version field is 6, determining that the protocol version used by the data packet to be identified is an IPV6 protocol version.
In an IP packet, the first byte of the upper four bits of data may be used to represent an IP protocol version. In the embodiment of the invention, the first byte high four-bit data of the data packet to be identified, namely the protocol version field of the data packet to be identified, can be extracted, so that the protocol version used by the data packet to be identified is determined based on the value of the protocol version field.
If the first byte of the high-four-bit data is 0100, namely the field value of the protocol version is 4, the protocol version used by the data packet to be identified can be indicated as the IPV4 protocol version, and if the first byte of the high-four-bit data is 0110, namely the field value of the protocol version is 6, the protocol version used by the data packet to be identified can be indicated as the IPV6 protocol version.
If the protocol version field value of the data packet to be identified is neither 4 nor 6, it may be stated that the version protocol used by the data packet to be identified is not an IP version protocol, and the data packet to be identified is not an IP packet.
The embodiment of the invention can judge whether the protocol version used by the data packet to be identified is the IPV4 protocol version or the IPV6 protocol version by extracting the first byte high four-bit data, thereby determining whether the protocol version used by the data packet to be identified accords with the IP packet characteristics, and being beneficial to determining the communication transmission mechanism adopted by the two communication parties when the received communication data is analyzed and processed without depending on the context interaction of the two communication parties.
Based on any one of the above embodiments, if the protocol version used by the to-be-identified data packet is an IP protocol version, determining whether the to-be-identified data packet is a valid data packet based on the payload length of the to-be-identified data packet may specifically include:
step S21, if the protocol version used by the data packet to be identified is an IPV4 protocol version, calculating the load length of the data packet to be identified based on the total length and the head length of the data packet to be identified;
Step S22, if the protocol version used by the data packet to be identified is the IPV6 protocol version, determining the payload length of the data packet to be identified based on the value of the payload length field of the data packet to be identified;
Step S23, if the load length of the data packet to be identified is greater than the minimum load length threshold value, determining that the data packet to be identified is a valid data packet.
The header of the IPV4 packet may include a total length field (not including the payload length field), which may be used to describe the total length of the data packet. In the embodiment of the present invention, if the protocol version used by the data packet to be identified is the IPV4 protocol version, the payload length of the data packet to be identified may be calculated based on the total length and the header length of the data packet to be identified.
The header of the IPV6 packet may contain a payload length field (not containing a total length field). In the embodiment of the present invention, if the protocol version used by the data packet to be identified is the IPV6 protocol version, the payload length of the data packet to be identified may be determined based on the value of the payload length field of the data packet to be identified.
In the embodiment of the invention, after the load length of the data packet to be identified is determined, whether the load length of the data packet to be identified is greater than the minimum load length threshold value can be judged. If the load length of the data packet to be identified is smaller than or equal to the minimum load length threshold value, the data packet to be identified can be invalid, and the data packet to be identified is not accordant with the IP packet characteristics and is discarded.
Alternatively, the minimum load length threshold value may be set to 7. It should be noted that, the minimum load length threshold value may also be set to other values according to actual needs, and the present invention is not limited in particular.
The embodiment of the invention determines the corresponding load length calculation mode based on the characteristics of the protocol version used by the data packet to be identified so as to judge whether the load length of the data packet to be identified is greater than the minimum load length threshold value or not, so as to detect whether the load length of the data packet to be identified accords with the characteristics of the IP packet or not, and the embodiment of the invention is beneficial to determining the communication transmission mechanism adopted by the two communication parties when receiving communication data for analysis and processing without depending on the context interaction of the two communication parties.
Based on any of the foregoing embodiments, the calculating the payload length of the to-be-identified data packet based on the total length and the header length of the to-be-identified data packet may specifically include:
Step S211, extracting the first byte low four-bit data of the data packet to be identified to obtain a header length field of the data packet to be identified;
step S212, determining the head length of the data packet to be identified based on the value of the head length field;
Step S213, calculating the difference between the total length and the head length of the data packet to be identified, and obtaining the load length of the data packet to be identified.
In an IPV4 packet, the first byte of lower four bits of data may be used to represent the header length of the entire IP packet. In the embodiment of the invention, the first byte low four-bit data of the data packet to be identified, namely the header length field of the data packet to be identified, can be extracted, so that the header length of the data packet to be identified is determined based on the value of the header length field, then, the difference value between the total length of the data packet to be identified and the header length can be calculated, the load length of the data packet to be identified is obtained, and the load length of the data packet to be identified is compared with the minimum load length threshold value, so that whether the data packet to be identified is a valid data packet is detected.
In some embodiments, the sum of the header length of the data packet to be identified and the minimum load length threshold value may be calculated to obtain a minimum total length threshold value, and the total length of the data packet to be identified may be compared with the minimum total length threshold value. And if the total length of the data packet to be identified is smaller than or equal to the minimum total length threshold value, determining that the data packet to be identified is an invalid data packet.
According to the embodiment of the invention, the low-four-bit data of the first byte of the data packet to be identified is extracted based on the characteristics of the IPV4 packet, and the load length is determined so as to judge whether the load length of the data packet to be identified is larger than the minimum load length threshold value or not, so that whether the load length of the data packet to be identified accords with the characteristics of the IP packet or not is detected, the context interaction of two communication parties is not needed, and the determination of the communication transmission mechanism adopted by the two communication parties is facilitated when the received communication data is analyzed and processed.
Based on any of the foregoing embodiments, the determining the payload length of the to-be-identified data packet based on the value of the payload length field of the to-be-identified data packet may specifically include:
step S221, extracting the fourth byte data and the fifth byte data of the data packet to be identified to obtain a payload length field of the data packet to be identified;
step S222, determining the payload length of the data packet to be identified based on the value of the payload length field.
In an IPV6 packet, the fourth byte and the fifth byte of data may be used to represent the payload length of the entire IP packet. In the embodiment of the invention, the fourth byte data and the fifth byte data of the data packet to be identified, namely the load length field of the data packet to be identified, can be extracted, so that the load length of the data packet to be identified is determined based on the value of the load length field, and the load length of the data packet to be identified is compared with the minimum load length threshold value, so that whether the data packet to be identified is a valid data packet is detected.
According to the embodiment of the invention, the fourth byte data and the fifth byte data of the data packet to be identified are extracted based on the characteristics of the IPV6 packet, and the load length is determined so as to judge whether the load length of the data packet to be identified is larger than the minimum load length threshold value or not, so that whether the load length of the data packet to be identified accords with the characteristics of the IP packet or not is detected, the context interaction of two communication parties is not needed, and the determination of the communication transmission mechanism adopted by the two communication parties is facilitated when the received communication data are analyzed and processed.
Based on any of the foregoing embodiments, the determining, based on the value of the bearer protocol field of the to-be-identified data packet, the bearer protocol type used by the to-be-identified data packet may specifically include:
Step S31, if the protocol version used by the data packet to be identified is the IPV4 protocol version, extracting the ninth byte data of the data packet to be identified to obtain the bearing protocol field of the data packet to be identified;
step S32, if the protocol version used by the data packet to be identified is the IPV6 protocol version, extracting the sixth byte data of the data packet to be identified to obtain a bearing protocol field of the data packet to be identified;
Step S33, determining the bearer protocol type used by the data packet to be identified based on the value of the bearer protocol field of the data packet to be identified.
In an IPV4 packet, the ninth byte of data may be used to represent the bearer protocol type of the IPV4 packet. In the embodiment of the invention, the type of the bearer protocol used by the data packet to be identified can be determined by extracting the ninth byte data of the data packet to be identified, namely the bearer protocol field, of which the protocol version is IPV 4.
In an IPV6 packet, the sixth byte of data may be used to represent the bearer protocol type of the IPV6 packet. In the embodiment of the present invention, the type of the bearer protocol used by the data packet to be identified can be determined by extracting the sixth byte data, i.e., the bearer protocol field, of the data packet to be identified, where the protocol version used is IPV 6.
According to the embodiment of the invention, the ninth byte data is extracted based on the characteristics of the IPV4 packet, and the sixth byte data is extracted based on the characteristics of the IPV6 packet, so that the bearer protocol type is determined, whether the bearer protocol type of the data packet to be identified is the target protocol type or not is judged, whether the bearer protocol type of the data packet to be identified accords with the characteristics of the IP packet or not is detected, the context interaction of the two communication parties is not needed, and the determination of the communication transmission mechanism adopted by the two communication parties is facilitated when the received communication data is analyzed and processed.
In order to solve the problem that a transmission mechanism cannot be determined when a communication third party receives data analysis and processing of both communication parties in a non-cooperative receiving scene, the data packet identification method based on voice communication provided by the embodiment of the invention can detect and identify whether a received data packet is an IP packet or an ROHC packet without depending on context interaction of both communication parties, thereby determining the communication transmission mechanism of both communication parties.
In the embodiment of the invention, whether the data packet is an IP packet can be identified by detecting whether the received data packet accords with the IP packet characteristics. If the received data packet meets the IP packet characteristics, the received data packet is an IP packet, not a non-IP packet such as an ROHC compressed packet.
Fig. 2 is a second flowchart of a packet recognition method based on voice communication according to an embodiment of the present invention. In a specific embodiment, referring to fig. 2, after receiving the data packet to be identified, the protocol version field of the data packet to be identified may be extracted from the first byte of the high 4 bits data, and it is determined whether the value of the protocol version field of the data packet to be identified is equal to 4 or equal to 6. If the protocol version field value is not 4 and is not 6, the data packet to be identified is determined to be a non-IP packet.
If the protocol version field value is 4, extracting an IPV4 header length field from the first byte low 4 bit data, obtaining a header length value according to the IPV4 format, and judging whether the total length of the data packet is greater than the sum of the header length value and a minimum load length threshold value (the default value is 7). If the total length of the packet with the protocol version IPV4 is greater than the sum of the header length value and the minimum payload length threshold value, the packet is a valid packet, a bearer protocol type field is extracted from the 9 th byte, and it is determined whether the bearer protocol type field is a target protocol type value (i.e., whether the bearer protocol type field is a legal type value, and the type values should be 50, 6, 17, 58, 59, 60, 41, 42, 43, 44). If the total length of the data packet with the protocol version of IPV4 is less than or equal to the sum of the header length value and the minimum load length threshold value, the data packet is judged to be a non-IP packet.
If the protocol version field value is 6, the header length of the data packet is 40 bytes, the IPV6 payload length field is extracted from the fourth byte and the fifth byte, the payload length value is obtained according to the IPV6 format, and whether the payload length value is greater than the minimum payload length threshold value (the default value is 7) is judged. If the payload length value of the packet with the protocol version IPV6 is greater than the minimum payload length threshold value, the packet is a valid packet, a bearer protocol type field is extracted from the 6 th byte, and it is determined whether the bearer protocol type field is a target protocol type value (i.e., whether the bearer protocol type field is a legal type value, and the type values should be 50, 6, 17, 58, 59, 60, 41, 42, 43, 44). And if the load length value of the data packet with the protocol version of IPV6 is smaller than or equal to the minimum load length threshold value, judging that the data packet is a non-IP packet.
And if the bearing protocol type field of the data packet is a target protocol type value, determining that the data packet is an IP packet. If the bearer protocol type field of the data packet is not the target protocol type value, the data packet is determined to be a non-IP packet.
In some embodiments, when receiving the data packet to be identified, the data packet to be identified may be decrypted first, and whether the data packet accords with the IP packet feature is detected based on the information such as the protocol version, the payload length, the bearer protocol and the like carried by the decrypted data packet to be identified, so as to determine whether the decryption is successful. In the decryption process, the decryption of the data packet to be identified can be realized without communication interaction with a communication party.
In particular, all stored user key identifier (KEY IDENTIFIER, KI) parameters may be tried through the received authentication request message, and the authentication pass may then generate the associated message key Knasenc, knasinc, krrcenc, krrcinc, kupenc for the communication.
And if the received radio resource Control (Radio Resource Control, RRC) message and Non-Access Stratum (NAS) message are not decrypted for the first time, traversing the parameters of an attempt decryption algorithm, a count value and bearerid, comparing the calculated integrity protection value media Access Control Address (MEDIA ACCESS Control Address, MAC), judging whether decryption is successful or not, and if the decryption is not the first time, preferentially decrypting the parameters which are successfully decrypted before using.
And the received user plane data message can adopt an algorithm for successfully decrypting the RRC message and the NAS message, carry out traversal attempt decryption on the count value and bearerid parameters, and judge whether decryption is successful or not according to whether decryption result data accords with IP packet characteristics or not.
In some embodiments, after determining that the data packet to be identified is an IP packet, whether the IP packet is an AMR voice data packet may be further detected based on information carried by the IP packet, so that the AMR voice content may be transmitted, restored and played without relying on context information of both communication parties. Specifically, the data content of the IP packet may be matched based on Adaptive Multi-Rate (AMR) voice data format features, and if the data content does not conform to the AMR voice data format features, the AMR voice detection recognition is determined to fail, otherwise, the AMR voice detection recognition is determined to be successful. Specifically, the IP packet may extract a coding Rate value (CALL MANAGEMENT Record, CMR) field and a coding Format or frame Type (Format Type or FRAME TYPE, FT) field of a call Type (Table of Contents, TOC) according to an AMR Format, and determine whether the coding Rate value is a normal range value in an AMR-NB (Adaptive Multi-Rate narrow band) and an AMR-WB (Adaptive Multi-Rate wide band) Format. If the normal range value is not met, the AMR voice data is not generated, and if the normal range value is met, the AMR voice data is generated.
Since AMR speech frames are 20ms long per frame, the speech data content length can be calculated from the speech coding rate. The AMR voice data is not generated if the received voice data content length is not equal to the voice data content length calculated according to the encoding rate, and the AMR voice data is generated if the received voice data content length is equal to the calculated voice data content length.
The following describes a voice communication-based packet recognition apparatus provided by the present invention, and the voice communication-based packet recognition apparatus described below and the voice communication-based packet recognition method described above may be referred to correspondingly to each other.
Fig. 3 is a schematic structural diagram of a packet recognition device based on voice communication according to an embodiment of the present invention. Referring to fig. 3, an embodiment of the present invention provides a packet recognition device based on voice communication, where the device may specifically include the following modules:
a protocol version determining module 310, configured to receive a data packet to be identified, and determine a protocol version used by the data packet to be identified based on a value of a protocol version field of the data packet to be identified;
The payload length determining module 320 is configured to determine, if the protocol version used by the to-be-identified data packet is an IP protocol version, whether the to-be-identified data packet is a valid data packet based on the payload length of the to-be-identified data packet;
A bearer protocol determining module 330, configured to determine, if the data packet to be identified is a valid data packet, a bearer protocol type used by the data packet to be identified based on a value of a bearer protocol field of the data packet to be identified;
The IP packet determining module 340 is configured to determine that the data packet to be identified is an IP packet if the bearer protocol type used by the data packet to be identified is a target protocol type;
The non-IP packet determining module 350 is configured to determine that the data packet to be identified is a non-IP packet if the protocol version used by the data packet to be identified is not an IP protocol version, or the data packet to be identified is an invalid data packet, or the bearer protocol type used by the data packet to be identified is not a target protocol type.
According to the embodiment of the invention, whether the data packet to be identified accords with the IP packet characteristics or not is detected through the protocol version used by the data packet to be identified, the load length of the data packet to be identified and the bearing protocol used by the data packet to be identified, so that whether the data packet to be identified is an IP packet is determined, and when communication negotiation signaling cannot be received in the voice communication process, the communication transmission mechanism adopted by both communication parties can be determined by only carrying out IP packet detection and identification by using the information carried in the data packet to be identified when the communication data is analyzed and processed, and the efficiency of determining the communication transmission mechanism is improved and the communication data analysis and processing efficiency is further improved without depending on the context interaction information of both communication parties.
Fig. 4 illustrates a physical schematic diagram of an electronic device, as shown in fig. 4, which may include a processor (processor) 410, a communication interface (Communications Interface) 420, a memory (memory) 430, and a communication bus 440, where the processor 410, the communication interface 420, and the memory 430 perform communication with each other through the communication bus 440. The processor 410 may invoke logic instructions in the memory 430 to perform a method for identifying a data packet based on voice communication, where the method includes receiving a data packet to be identified, determining a protocol version used by the data packet to be identified based on a value of a protocol version field of the data packet to be identified, determining whether the data packet to be identified is a valid data packet based on a payload length of the data packet to be identified if the protocol version used by the data packet to be identified is an IP protocol version, determining a bearer protocol type used by the data packet to be identified based on a value of a bearer protocol field of the data packet to be identified if the data packet to be identified is a valid data packet, determining the data packet to be identified as an IP packet if the bearer protocol type used by the data packet to be identified is a target protocol type, and determining the data packet to be identified as a non-IP packet if the protocol version used by the data packet to be identified is not an IP protocol version or the data packet to be identified as an invalid data packet or the bearer protocol type used by the data packet to be identified as a target type.
Further, the logic instructions in the memory 430 described above may be implemented in the form of software functional units and may be stored in a computer-readable storage medium when sold or used as a stand-alone product. Based on this understanding, the technical solution of the present invention may be embodied essentially or in a part contributing to the prior art or in a part of the technical solution, in the form of a software product stored in a storage medium, comprising several instructions for causing a computer device (which may be a personal computer, a server, a network device, etc.) to perform all or part of the steps of the method according to the embodiments of the present invention. The storage medium includes a U disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (RAM, random Access Memory), a magnetic disk, an optical disk, or other various media capable of storing program codes.
In another aspect, the present invention further provides a computer program product, where the computer program product includes a computer program, where the computer program is capable of being stored on a non-transitory computer readable storage medium, and when the computer program is executed by a processor, the computer is capable of executing the voice communication-based data packet identification method provided by the above methods, where the method includes receiving a data packet to be identified, determining a protocol version used by the data packet to be identified based on a value of a protocol version field of the data packet to be identified, determining whether the data packet to be identified is a valid data packet based on a payload length of the data packet to be identified, determining a bearer protocol type used by the data packet to be identified based on a value of a bearer protocol field of the data packet to be identified, determining that the data packet to be identified is an IP packet if the bearer protocol type used by the data packet to be identified is a target protocol type, and determining that the data packet to be identified is an IP packet if the protocol version used by the data packet to be identified is not an IP packet, and determining that the data packet to be identified is not a target type.
In yet another aspect, the present invention further provides a non-transitory computer readable storage medium, on which a computer program is stored, the computer program being implemented when executed by a processor to perform the voice communication-based data packet identification method provided by the above methods, where the method includes receiving a data packet to be identified, determining a protocol version used by the data packet to be identified based on a value of a protocol version field of the data packet to be identified, determining whether the data packet to be identified is a valid data packet based on a payload length of the data packet to be identified, determining a bearer protocol type used by the data packet to be identified based on a value of a bearer protocol field of the data packet to be identified, determining the data packet to be identified as an IP packet if the bearer protocol type used by the data packet to be identified is a target protocol type, and determining whether the protocol version used by the data packet to be identified is not an IP protocol version or not to be identified as an invalid protocol type if the protocol version used by the data packet to be identified is not the target protocol type.
The apparatus embodiments described above are merely illustrative, wherein the elements illustrated as separate elements may or may not be physically separate, and the elements shown as elements may or may not be physical elements, may be located in one place, or may be distributed over a plurality of network elements. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment. Those of ordinary skill in the art will understand and implement the present invention without undue burden.
From the above description of the embodiments, it will be apparent to those skilled in the art that the embodiments may be implemented by means of software plus necessary general hardware platforms, or of course may be implemented by means of hardware. Based on this understanding, the foregoing technical solution may be embodied essentially or in a part contributing to the prior art in the form of a software product, which may be stored in a computer readable storage medium, such as ROM/RAM, a magnetic disk, an optical disk, etc., including several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the method described in the respective embodiments or some parts of the embodiments.
It should be noted that the above-mentioned embodiments are merely for illustrating the technical solution of the present invention, and not for limiting the same, and although the present invention has been described in detail with reference to the above-mentioned embodiments, it should be understood by those skilled in the art that the technical solution described in the above-mentioned embodiments may be modified or some technical features may be equivalently replaced, and these modifications or substitutions do not make the essence of the corresponding technical solution deviate from the spirit and scope of the technical solution of the embodiments of the present invention.

Claims (10)

1.一种基于语音通信的数据包识别方法,其特征在于,包括:1. A method for identifying data packets based on voice communication, comprising: 接收待识别数据包,基于所述待识别数据包的协议版本字段的值,确定所述待识别数据包所使用的协议版本;Receive a data packet to be identified, and determine a protocol version used by the data packet to be identified based on a value of a protocol version field of the data packet to be identified; 若所述待识别数据包所使用的协议版本为IP协议版本,则基于所述待识别数据包的载荷长度,确定所述待识别数据包是否为有效数据包;If the protocol version used by the data packet to be identified is the IP protocol version, determining whether the data packet to be identified is a valid data packet based on the payload length of the data packet to be identified; 若所述待识别数据包为有效数据包,则基于所述待识别数据包的承载协议字段的值,确定所述待识别数据包所使用的承载协议类型;If the data packet to be identified is a valid data packet, determining the bearer protocol type used by the data packet to be identified based on the value of the bearer protocol field of the data packet to be identified; 若所述待识别数据包所使用的承载协议类型为目标协议类型,则确定所述待识别数据包为IP包;If the bearer protocol type used by the data packet to be identified is the target protocol type, determining that the data packet to be identified is an IP packet; 若所述待识别数据包所使用的协议版本不为IP协议版本,或所述待识别数据包为无效数据包,或所述待识别数据包所使用的承载协议类型不为目标协议类型,则确定所述待识别数据包为非IP包。If the protocol version used by the data packet to be identified is not the IP protocol version, or the data packet to be identified is an invalid data packet, or the bearer protocol type used by the data packet to be identified is not the target protocol type, then it is determined that the data packet to be identified is a non-IP packet. 2.根据权利要求1所述的基于语音通信的数据包识别方法,其特征在于,所述IP协议版本包括IPV4协议版本和IPV6协议版本;所述基于所述待识别数据包的协议版本字段的值,确定所述待识别数据包所使用的协议版本,包括:2. The method for identifying data packets based on voice communication according to claim 1, wherein the IP protocol version includes an IPV4 protocol version and an IPV6 protocol version; and the step of determining the protocol version used by the data packet to be identified based on the value of the protocol version field of the data packet to be identified comprises: 提取所述待识别数据包的第一字节高四位数据,得到所述待识别数据包的协议版本字段;Extract the high four bits of the first byte of the data packet to be identified to obtain the protocol version field of the data packet to be identified; 若所述协议版本字段的值为4,则确定所述待识别数据包所使用的协议版本为IPV4协议版本;If the value of the protocol version field is 4, it is determined that the protocol version used by the data packet to be identified is the IPV4 protocol version; 若所述协议版本字段的值为6,则确定所述待识别数据包所使用的协议版本为IPV6协议版本。If the value of the protocol version field is 6, it is determined that the protocol version used by the data packet to be identified is the IPV6 protocol version. 3.根据权利要求1所述的基于语音通信的数据包识别方法,其特征在于,所述若所述待识别数据包所使用的协议版本为IP协议版本,则基于所述待识别数据包的载荷长度,确定所述待识别数据包是否为有效数据包,包括:3. The method for identifying data packets based on voice communication according to claim 1, wherein if the protocol version used by the data packet to be identified is the IP protocol version, determining whether the data packet to be identified is a valid data packet based on the payload length of the data packet to be identified comprises: 若所述待识别数据包所使用的协议版本为IPV4协议版本,则基于所述待识别数据包的总长度和头部长度,计算所述待识别数据包的载荷长度;If the protocol version used by the data packet to be identified is the IPV4 protocol version, then based on the total length and header length of the data packet to be identified, the payload length of the data packet to be identified is calculated; 若所述待识别数据包所使用的协议版本为IPV6协议版本,则基于所述待识别数据包的载荷长度字段的值,确定所述待识别数据包的载荷长度;If the protocol version used by the data packet to be identified is the IPV6 protocol version, determining the payload length of the data packet to be identified based on the value of the payload length field of the data packet to be identified; 若所述待识别数据包的载荷长度大于最小载荷长度门限值,则确定所述待识别数据包为有效数据包。If the payload length of the data packet to be identified is greater than the minimum payload length threshold, the data packet to be identified is determined to be a valid data packet. 4.根据权利要求3所述的基于语音通信的数据包识别方法,其特征在于,所述基于所述待识别数据包的总长度和头部长度,计算所述待识别数据包的载荷长度,包括:4. The method for identifying data packets based on voice communication according to claim 3, wherein the step of calculating the payload length of the data packet to be identified based on the total length and header length of the data packet to be identified comprises: 提取所述待识别数据包的第一字节低四位数据,得到所述待识别数据包的头部长度字段;Extracting the lower four bits of the first byte of the data packet to be identified to obtain the header length field of the data packet to be identified; 基于所述头部长度字段的值,确定所述待识别数据包的头部长度;Determining the header length of the data packet to be identified based on the value of the header length field; 对所述待识别数据包的总长度和头部长度进行差值计算,得到所述待识别数据包的载荷长度。The difference between the total length and the header length of the data packet to be identified is calculated to obtain the payload length of the data packet to be identified. 5.根据权利要求3所述的基于语音通信的数据包识别方法,其特征在于,所述基于所述待识别数据包的载荷长度字段的值,确定所述待识别数据包的载荷长度,包括:5. The method for identifying data packets based on voice communication according to claim 3, wherein determining the payload length of the data packet to be identified based on the value of the payload length field of the data packet to be identified comprises: 提取所述待识别数据包的第四字节数据和第五字节数据,得到所述待识别数据包的载荷长度字段;Extracting the fourth byte data and the fifth byte data of the data packet to be identified, and obtaining the payload length field of the data packet to be identified; 基于所述载荷长度字段的值,确定所述待识别数据包的载荷长度。Based on the value of the payload length field, the payload length of the data packet to be identified is determined. 6.根据权利要求1所述的基于语音通信的数据包识别方法,其特征在于,所述基于所述待识别数据包的承载协议字段的值,确定所述待识别数据包所使用的承载协议类型,包括:6. The method for identifying data packets based on voice communication according to claim 1, wherein determining the type of bearer protocol used by the data packet to be identified based on the value of the bearer protocol field of the data packet to be identified comprises: 若所述待识别数据包所使用的协议版本为IPV4协议版本,则提取所述待识别数据包的第九字节数据,得到所述待识别数据包的承载协议字段;If the protocol version used by the data packet to be identified is the IPV4 protocol version, extract the ninth byte data of the data packet to be identified to obtain the bearer protocol field of the data packet to be identified; 若所述待识别数据包所使用的协议版本为IPV6协议版本,则提取所述待识别数据包的第六字节数据,得到所述待识别数据包的承载协议字段;If the protocol version used by the data packet to be identified is the IPV6 protocol version, extracting the sixth byte data of the data packet to be identified to obtain the bearer protocol field of the data packet to be identified; 基于所述待识别数据包的承载协议字段的值,确定所述待识别数据包所使用的承载协议类型。Based on the value of the bearer protocol field of the data packet to be identified, the bearer protocol type used by the data packet to be identified is determined. 7.一种基于语音通信的数据包识别装置,其特征在于,包括:7. A data packet identification device based on voice communication, characterized in that it includes: 协议版本确定模块,用于接收待识别数据包,基于所述待识别数据包的协议版本字段的值,确定所述待识别数据包所使用的协议版本;A protocol version determination module, configured to receive a data packet to be identified, and determine a protocol version used by the data packet to be identified based on a value of a protocol version field of the data packet to be identified; 载荷长度确定模块,用于若所述待识别数据包所使用的协议版本为IP协议版本,则基于所述待识别数据包的载荷长度,确定所述待识别数据包是否为有效数据包;A payload length determination module, configured to determine whether the data packet to be identified is a valid data packet based on the payload length of the data packet to be identified if the protocol version used by the data packet to be identified is an IP protocol version; 承载协议确定模块,用于若所述待识别数据包为有效数据包,则基于所述待识别数据包的承载协议字段的值,确定所述待识别数据包所使用的承载协议类型;A bearer protocol determining module, configured to determine the bearer protocol type used by the data packet to be identified based on the value of the bearer protocol field of the data packet to be identified if the data packet to be identified is a valid data packet; IP包确定模块,用于若所述待识别数据包所使用的承载协议类型为目标协议类型,则确定所述待识别数据包为IP包;An IP packet determination module, configured to determine that the data packet to be identified is an IP packet if the bearer protocol type used by the data packet to be identified is a target protocol type; 非IP包确定模块,用于若所述待识别数据包所使用的协议版本不为IP协议版本,或所述待识别数据包为无效数据包,或所述待识别数据包所使用的承载协议类型不为目标协议类型,则确定所述待识别数据包为非IP包。A non-IP packet determination module is used to determine that the data packet to be identified is a non-IP packet if the protocol version used by the data packet to be identified is not an IP protocol version, or the data packet to be identified is an invalid data packet, or the bearer protocol type used by the data packet to be identified is not a target protocol type. 8.一种电子设备,包括存储器、处理器及存储在所述存储器上并可在所述处理器上运行的计算机程序,其特征在于,所述处理器执行所述计算机程序时实现如权利要求1至6任一项所述基于语音通信的数据包识别方法。8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the data packet identification method based on voice communication as described in any one of claims 1 to 6 when executing the computer program. 9.一种非暂态计算机可读存储介质,其上存储有计算机程序,其特征在于,所述计算机程序被处理器执行时实现如权利要求1至6任一项所述基于语音通信的数据包识别方法。9. A non-transitory computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the method for identifying data packets based on voice communication as claimed in any one of claims 1 to 6 is implemented. 10.一种计算机程序产品,包括计算机程序,其特征在于,所述计算机程序被处理器执行时实现如权利要求1至6任一项所述基于语音通信的数据包识别方法。10. A computer program product, comprising a computer program, characterized in that when the computer program is executed by a processor, the method for identifying data packets based on voice communication according to any one of claims 1 to 6 is implemented.
CN202411757827.7A 2024-12-03 2024-12-03 Data packet identification method, device, equipment and medium based on voice communication Active CN119254862B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202411757827.7A CN119254862B (en) 2024-12-03 2024-12-03 Data packet identification method, device, equipment and medium based on voice communication

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202411757827.7A CN119254862B (en) 2024-12-03 2024-12-03 Data packet identification method, device, equipment and medium based on voice communication

Publications (2)

Publication Number Publication Date
CN119254862A true CN119254862A (en) 2025-01-03
CN119254862B CN119254862B (en) 2025-04-01

Family

ID=94020313

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202411757827.7A Active CN119254862B (en) 2024-12-03 2024-12-03 Data packet identification method, device, equipment and medium based on voice communication

Country Status (1)

Country Link
CN (1) CN119254862B (en)

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020097723A1 (en) * 2000-10-18 2002-07-25 Ari Tourunen Defining header field compression for data packet connection
US20070211724A1 (en) * 2006-03-07 2007-09-13 Ingemar Johansson Communication station and method providing flexible compression of data packets
CN101212404A (en) * 2006-12-27 2008-07-02 大唐移动通信设备有限公司 Robust header compressed group data transmission method and system
CN101960815A (en) * 2008-02-28 2011-01-26 阿尔卡特朗讯公司 Compressed IP flow recognition for in-line integrated mobile DPI
CN102118791A (en) * 2009-12-31 2011-07-06 华为技术有限公司 Method and device for transmitting data packets
WO2016171008A1 (en) * 2015-04-24 2016-10-27 ソニー株式会社 Transmission apparatus, transmission method, reception apparatus and reception method
US20210345171A1 (en) * 2018-12-21 2021-11-04 Lg Electronics Inc. Method and apparatus for transmitting data unit using dual header compression algorithm in wireless communication system
WO2022111365A1 (en) * 2020-11-26 2022-06-02 展讯通信(上海)有限公司 Data transmission method and apparatus, device, storage medium, and program product

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020097723A1 (en) * 2000-10-18 2002-07-25 Ari Tourunen Defining header field compression for data packet connection
US20070211724A1 (en) * 2006-03-07 2007-09-13 Ingemar Johansson Communication station and method providing flexible compression of data packets
CN101212404A (en) * 2006-12-27 2008-07-02 大唐移动通信设备有限公司 Robust header compressed group data transmission method and system
CN101960815A (en) * 2008-02-28 2011-01-26 阿尔卡特朗讯公司 Compressed IP flow recognition for in-line integrated mobile DPI
CN102118791A (en) * 2009-12-31 2011-07-06 华为技术有限公司 Method and device for transmitting data packets
WO2016171008A1 (en) * 2015-04-24 2016-10-27 ソニー株式会社 Transmission apparatus, transmission method, reception apparatus and reception method
US20210345171A1 (en) * 2018-12-21 2021-11-04 Lg Electronics Inc. Method and apparatus for transmitting data unit using dual header compression algorithm in wireless communication system
WO2022111365A1 (en) * 2020-11-26 2022-06-02 展讯通信(上海)有限公司 Data transmission method and apparatus, device, storage medium, and program product

Also Published As

Publication number Publication date
CN119254862B (en) 2025-04-01

Similar Documents

Publication Publication Date Title
EP3697042B1 (en) Traffic analysis method, public service traffic attribution method and corresponding computer system
US7822073B2 (en) Packet flow side channel
US8244305B2 (en) Efficient, secure digital wireless voice telephony via selective encryption
CN104348811A (en) Method and device for detecting attack of DDoS (distributed denial of service)
US8054969B2 (en) Transmission of a digital message interspersed throughout a compressed information signal
CN110474922B (en) Communication method, PC system and access control router
WO2021174879A1 (en) Ai video call quality analysis method and apparatus, computer device, and storage medium
US20090138959A1 (en) DEVICE, SYSTEM AND METHOD FOR DROPPING ATTACK MULTIMEDIA PACKET IN THE VoIP SERVICE
US7426636B1 (en) Compact secure data communication method
CN119363643A (en) Double-network integrated voice scheduling switching system
CN119254862B (en) Data packet identification method, device, equipment and medium based on voice communication
CN115442060B (en) A custom encryption protocol traffic processing method, device and electronic device
CN113890897A (en) Message processing method and related device
CN110111772B (en) A method for identifying languages used in encrypted VoIP network traffic
WO2018214070A1 (en) Decoding method and device
CN110572415B (en) Safety protection method, equipment and system
CA2619811C (en) Signal watermarking in the presence of encryption
CN116827919A (en) Internet voice restoration method and device, electronic equipment and storage medium
CN115567942A (en) 5G network endogenous security protection method, device, network element and storage medium
JP5075203B2 (en) Apparatus and method for SIPVIA field compression in session initiation protocol signaling to 3G wireless network
CN119011690B (en) ROHC decompression method, device and equipment based on voice communication
KR101538310B1 (en) APPARATUS, SYSTEM AND METHOD FOR DETECTING ABNORMAL MESSAGE FOR OBTAINING LOCATION INFORMATION BASED ON VoLTE SERVICE IN 4G MOBILE NETWORKS
CN119696937B (en) Data encryption method, electronic device and computer-readable storage medium
CN115484237B (en) A signaling message processing method, device, equipment and medium
CN115883342B (en) Method, device and electronic device for positioning poor quality services of customer acquisition services

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant