Traffic Monitoring

Traffic monitoring and classification
The monitoring and classification of the traffic that is traversing a network link is a very important task performed by Intrusion Prevention Systems (IPS), in order to have an in-depth comprehension of the applications being used by their users and to analyze how their network is prepared to provide levels of service agreed with their customers. Among all the mechanisms used to classify network traffic, the Deep Packet Inspection (DPI) is the most used technique. DPI can aid to ISPs in the profiling of networked applications. With this information ISPs may then apply different charging policies, traffic shaping and offer different quality of service guarantees to selected users or applications.
InterStream DPI techniques mainly rely on multi-level traffic classification architecture supporting both header-level and content-level classification techniques. Content-level classification performs comparing the packet payload or the content of the stateful flow with a set of strings or regular expressions, which essentially assumed to represent a given signature of an application. As shown in figure below, to help our customers build up their competitive solutions in a DPI-enabled traffic monitoring and classification application. InterStream Content Matching Network Adapters support the flexible deployment model of signature matching functionality to allow customers to see far deeper into their network traffic and determine which application is carried by a particular packet stream.