Using nDPI over DPDK to Classify and Block Unwanted Network Traffic - Luca Deri, ntop

preview_player
Показать описание
Using nDPI over DPDK to Classify and Block Unwanted Network Traffic - Luca Deri, ntop
Speakers: Luca Deri
nDPI is an open source library that used DPI (deep packet inspection) techniques to classify network traffic. It can be used in monitoring tools to characterise network traffic, or inline to enforce network traffic policies. nDPI currently supports over 250 protocols including skype, bit torrent, and tor, and it is part of many open source applications and Linux distributions. This talk will cover the design of nDPI, and it explains how to use it on top of DPDK to efficiently monitor and block selected communication flows. Various real case examples are demonstrated ranging from parental control enforcement to IoT devices protection.
Рекомендации по теме
Комментарии
Автор

at 12:50 there is a mention of protocols misbehaving. What is the misbehaving here?
Also after passing through firewalls they become something else. What is that?

utkarshkathuria