Identify P2P traffic by inspecting data transfer behavior
Author(s)
Author(s)
Xu, K.
Zhang, M.
Ye, M.
Wu, J.
Date Issued
2010
Publisher
Elsevier
Journal
Computer Communications
Volume
33
Issue
10
Start page
1141
End page
1150
Abstract
Classifying network traffic according to its applications is important to a broad range of network areas. Since new applications, especially P2P applications, no longer use well-known fixed port numbers, the native port-based traffic classification technique has become much less effective. In this paper, we propose a novel approach to identify P2P traffic by leveraging the data transfer behavior of P2P applications. The behavior investigated in the paper is that downloaded data from a P2P host will be uploaded to other hosts later. To find the shared data of downloading flows and uploading flows online, the content-based partitioning scheme is proposed to partition the flows into data blocks. Flows sharing the same data blocks are identified as P2P flows. Theoretical analysis proves that the content-based partitioning scheme is stable and effective. Experiments on various P2P applications demonstrate that the method is generic and can be applied to most P2P applications. Experimental results show that the algorithm can identify P2P applications accurately while only keeping a small set of data blocks.
SFU Affiliated Publication
No
Availability at SFU Library
No database links found.