| Network application technique has developed greatly in recent years,network application becomes variety,people’s growing development of Internet has been explored and met constantly in the same time.As well,the consumption of net bandwidth has begin to grow geometri-cally.Because of a lack of understanding of application layer,network operators often fall into a vicious circle between dilatation and congestion.Therefore how to divide network traffic form the point of application layer,realizing the goal of indentifing and controlling the network traffic has became a focus causing more and more attention of scholars.Focused on above problems, composition of net-traffic and the cause of net-congestion was studied at first,then popular matching algorithms applying in net-traffic identification system were proposed,at last a application-layer network traffic identification and control was designed and realized,which is able to deal with congestion especially caused by P2P application in small or middle scale lan.Hoping all of those can provide network operators some opinions in practice.All the below works were completed in this thesis:(1)Studied the basic cause of net congestion by analyzing the composition of net-traffic, affirmed P2P traffic the key to cause this problem;(2) A multilevel traffic identification model including a number of identification technique has been proposed in this thesis.Studied and compared merits and demerits of popular net traffic identification technology,for example identification by ports,DPI and DFI, set a system designment including all above;(3)Modified matching algorithm called PTBM and AC-BMH based on BM and AC were proposed in this thesis.Studied the popular single mode and mulriple modes matching arithmetic,proposed improved arithmetics applying to different situations;(4) A application-layer network traffic identification and control system was designed and realized based on all studies and improvements mentioned above.It is especially focus on the P2P traffic.Then introduced the methods,core code data structure for realizing the system,they are preprocessing module,identify module,control module,knowledge base module and foreground module,at last efficiency of the system was evaluated. |