Abstract: A flow tracing algorithm based on dynamic hash tree （DHT） is presented, which takes use of the long-term stability of network session, constructs a dynamic tree with multiple hash tables, and can speed up the network session identifying and flow tracing p

Key words: Flow tracing,Network session,Long-term stability, Hash tree