Deep packet inspection engine goes open source (ars technica) [Posted September 9, 2009 by jake]

[liusz]

http://code.google.com/p/opendpi/downloads/list


http://lwn.net/Articles/351607/

Deep packet inspection engine goes open source (ars technica)
Posted Sep 9, 2009 14:48 UTC (Wed) by ajb (subscriber, #9694)
Parent article: Deep packet inspection engine goes open source (ars
technica)

Even if it doesn't read the contents of the packets, why would we want
our ISPs to discriminate based on protocol?

A more useful approach would seem to be the re-ecn system, currently
attempting to enter the IETF standards process: (http://
trac.tools.ietf.org/area/tsv/trac/wiki/re-ECN). This is intended to
expose the minimum necessary for ISPs to cleanly arbitrate between
users: information about congestion. Currently only endpoints can
easily observe congestion (well, it's slightly more complicated than
that, but I'm not sure I understand the details).
The idea, as I understand it, is that ISPS will be able to provide
good response to interactive applications, while allowing background
transfers like bittorrent to soak up the rest, rather than being
clamped as currently. nice(1) for the internet. If it works.

[liusz]

Differences between OpenDPI and PACE
PACE, the commercially available DPI engine from ipoque includes the
following extensions:
! behavioral detection: full detection of encrypted protocols like
Bittorrent, eDonkey and Skype
! asymmetric detection: protocol detection even when the up! or
downlink is missing
! IPv6 support
! performance optimizations: up to 5x faster
! memory optimizations: smaller memory footprint per flow
! optimized hash table for connection tracking allows up to 1 million
inserts per second per CPU with
automatic timeouts
1