Abstract: A method and apparatus for protocol parsing are disclosed, the method includes: performing flow table matching on a received packet to recognize a protocol of the packet; and when a protocol type of the packet is recognized and it is determined that the protocol type of the packet is a text-based protocol type, performing keyword matching on the packet according to a keyword matching rule in a keyword library corresponding to the protocol type of the packet, and extracting content of a keyword to be parsed in the packet; wherein, the keyword matching rule in the keyword library includes a keyword to be parsed that is expressed by using a regular expression and content of the keyword. The present invention applies to a device that parses a protocol of a packet.

Abstract: A method of a device for detecting a packet includes performing association recognition table matching between first match information in a received packet and first match information in an association recognition table, where the first match information of the association recognition table is obtained by extracting a content of a control packet used for creating a data channel, the first match information corresponds to a packet protocol, and the packet protocol is obtained by performing protocol recognition on the control packet; and when the association recognition table matching succeeds, outputting protocol information obtained after the association recognition table matching succeeds.