Service identification method and apparatus, and network device

A service identification apparatus comprising:

• a memory configured to store computer-executable instructions;
• a processor coupled to the memory, wherein the computer-executable instructions cause the processor to be configured to:
• receive first service packets;
• identify, from among the first service packets, second service packets that belong to a terminal;
• determine a service traffic feature based on session information of the terminal and packet information of the second service packets, wherein the service traffic feature comprises at least one of a session duration, a quantity of concurrent sessions, a traffic rate, a traffic rate stability, a packet transmit/receive frequency, a quantity of packets, a packet length, or a round-trip time related to a request packet and a response packet;
• and
• determine a service type of a to-be-identified service based on the service traffic feature, wherein the instructions that cause the processor to be configured to determine the service type comprise instructions that cause the processor to be configured to:
• obtain a traffic analysis model corresponding to a preset service type, wherein the traffic analysis model comprises a decision condition for the service traffic feature and a weight corresponding to the decision condition;
• determine a score of the decision condition based on a first score corresponding to the decision condition when the service traffic feature meets the decision condition;
• determine the score of the decision condition based on a second score corresponding to the decision condition when the service traffic feature does not meet the decision condition;
• calculate a corresponding total score of the traffic analysis model based on the weight and the score of the decision condition;
• and
• determine the service type of the to-be-identified service based on the corresponding total score of the traffic analysis model.

A computer program product comprising computer-executable instructions stored on a non-transitory computer-readable medium that, when executed by a processor, cause a network apparatus to:

• receive first service packets;
• identify, from among the first service packets, second service packets that belong to a terminal;
• determine a service traffic feature based on session information of the terminal and packet information of the second service packets, wherein the service traffic feature comprises at least one of a session duration, a quantity of concurrent sessions, a traffic rate, a traffic rate stability, a packet transmit/receive frequency, a quantity of packets, a packet length or a round-trip time related to a request packet and a response packet;
• and
• determine a service type of a to-be-identified service based on the service traffic feature, wherein the instructions that cause the network apparatus to determine the service type comprise instructions that cause the network apparatus to:
• obtain a traffic analysis model corresponding to a preset service type, wherein the traffic analysis model comprises a decision condition for the service traffic feature and a weight corresponding to the decision condition;
• determine a score of the decision condition based on a first score corresponding to the decision condition when the service traffic feature meets the decision condition;
• determine the score of the decision condition based on a second score corresponding to the decision condition when the service traffic feature does not meet the decision condition;
• calculate a corresponding total score of the traffic analysis model based on the weight and the score of the decision condition;
• and
• determine the service type of the to-be-identified service based on the corresponding total score of the traffic analysis model.