Deep Packet Inspection using Snort
Date
2016-09-12
Authors
Hafeez, Saad
Journal Title
Journal ISSN
Volume Title
Publisher
Abstract
Internet traffic analysis is of key interest to network designers, as efficient analysis leads to more efficient and fault-tolerant networks. Internet traffic can be analysed in different ways to perform tasks such as classification and filtration. Deep packet inspection is a means of filtering network traffic by monitoring a stream of packets and identifying strings of data that appear common. Based on information contained in the packet headers, or other protocol-specific parameters, we can distinguish the application of origin and even requests made by the application. In this report, Snort is used as a tool for deep packet inspection. Network traffic can be analysed by creating rules for web applications using Snort. Further, different policies can be implemented on Snort for deep packet inspection.
Description
Keywords
Deep Packet Inspection, Snort, DPI