Lightweight Ethereum encrypted traffic identification method

The invention discloses a lightweight Ethereum encrypted traffic identification method. The method comprises the following steps of firstly, setting an active node database to record Ethereum active node information, initializing an active node database by an Ethereum core node database, and dynamically updating the active node database according to a traffic identification result; and then, for nodes recorded in the active node database, identifying whether the nodes are Ethernet UDP traffic or not according to the port number, the message size and the message arrival sequence, encrypting handshake by the Ethernet, and identifying whether the nodes are Ethernet TCP traffic or not according to a message statistical result. According to the method, the characteristics of the encrypted flowof the Ethereum can be fully utilized, the encrypted flow of the Ethereum can be accurately identified, and a solid foundation is laid for network supervision of the Ethereum. 本发明公开了一种轻量化以太坊加密流量识别方法，首先，设置活跃节点库记录以太坊活跃节点信息，由以太坊