Using Deep Packet Inspection Post: 302200547

Sponsored Content

Special Forums Cybersecurity IT Security RSS Using Deep Packet Inspection Post 302200547 by Linux Bot on Thursday 29th of May 2008 10:50:00 AM

05-29-2008

Registered User

Using Deep Packet Inspection

Large companies are now starting to evaluate deep packet inspection technologies for several different purposes and a lot of questions are being made for network/security professionals about this technology. Let's talk about some of these questions:
First:
What is Deep Packet Inspection?
Deep packet inspection (DPI) is a form of packet analysis that examines the entire payload of a packet (sometimes at wirespeed) searching for non-protocol compliance, viruses, spam, intrusions, applications (P2P programs using well known ports like port 80 per example) to decide if the packet can pass or if it needs to be routed/rated/blocked, or for the purpose of collecting statistical information.
Second:
What's being done related with Security?
DPI enables advanced security functions like full packet string search that enable administrators to identify/block Layer 7 attacks like virus, worms, spam, etc with less false positives. Also Law Enforcement Agencies are start using DPI for Lawful Interception in core IP networks.
Third:
What's being done related with Network?
DPI is being used for companies/carriers for Internet data mining, application traffic control and network visibility. It enables companies/carriers to control non desired applications (P2P, Video Streaming, etc) wich consumes bandwidth with control and don't generate revenue (for carriers), allows administrators to identify users that are using non permited applications (for companies). With network visibility administrator can identify more easily network pain points (bottlenecks) and plan better the nework growth.
Fourth:
What else?
There's several other applications that DPI can help.

Quality os Service
Advertising
SLA
Traffic Monitoring

Why there's so controverse related to DPI?
DPI is a controversial technology (some says that DPI can change the Net neutrality) and there's rumors that is being used for Internet censorship. In my point of view like everything else DPI can be used for the good or the bad...It's always up to us to decide.
It really works?
I evaluated some DPI technologies and for sure there's a lot of beneficts that administrators can get with it. There are limitations but in the overall It really works.
My recomendation? See for yourself!
Regards

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

4 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

recursion too deep

I am running a korn shell script which has a recursive function. The script ran for 117 iterations and ended up with the following error "recursion too deep". what should be done to avert this? Thanks in advance Swamy p.s. I am on UNIX MPRAS V4

2. Programming

C++ Execution Inspection - Ideas Wanted

"C++ Execution Inspection" is the best term I could coin for what it is I'd like to do. Suggestions from anyone who has done programming in C++ on Linux are welcome. I was taught C++ in classrooms that used MS Visual Studio a few years ago. Visual Studio had a debugging mode that made it really...

3. AIX

Packet loss coming with big packet size ping

4. Programming

Deep copy of structure in C

Hi , I have a scenario where i need to copy the iter to another local variable , where iter is of type MCC_T_SYS_ADDRINFO *iter . struct addrinfo { int ai_flags; int ai_family; int ai_socktype; int ai_protocol; ...

LEARN ABOUT OSX

set_color

set_color(1)							       fish							      set_color(1)

NAME

       set_color - set_color - set the terminal color

set_color - set the terminal color
   Synopsis
       set_color [-v --version] [-h --help] [-b --background COLOR] [COLOR]

   Description
       Change the foreground and/or background color of the terminal. COLOR is one of black, red, green, brown, yellow, blue, magenta, purple,
       cyan, white and normal.

       o -b, --background Set the background color

       o -c, --print-colors Prints a list of all valid color names

       o -h, --help Display help message and exit

       o -o, --bold Set bold or extra bright mode

       o -u, --underline Set underlined mode

       o -v, --version Display version and exit

       Calling set_color normal will set the terminal color to whatever is the default color of the terminal.

       Some terminals use the --bold escape sequence to switch to a brighter color set. On such terminals, set_color white will result in a grey
       font color, while set_color --bold white will result in a white font color.

       Not all terminal emulators support all these features. This is not a bug in set_color but a missing feature in the terminal emulator.

       set_color uses the terminfo database to look up how to change terminal colors on whatever terminal is in use. Some systems have old and
       incomplete terminfo databases, and may lack color information for terminals that support it. Download and install the latest version of
       ncurses and recompile fish against it in order to fix this issue.

Version 1.23.1							  Sun Jan 8 2012						      set_color(1)