Method for detecting flow attacking message characteristic of network equipment

A method for detecting message character of attacking network device by flow includes selecting at least one detection item from network device port and each field of message masthead , using specific value of detection item in message as character value of said item , counting up total number of message having the same character value as detection item of message processed by network device in preset detecting period , checking out detection item and character value corresponded by message total number exceeding preset attack threshold and using them as character of attack message .