Search Results

1. M. Ilvesmäki and M. Luoma, On the Capabilities of Application Level Traffic Measurements to Differentiate and Classify Internet Traffic, in Internet Performance and Control of Network Systems II in ITCom 2001, vol. 4523, SPIE, 2001 (bib)

   Abstract: The use of network based tra±c classification to di®erentiate aggregate tra±c has been introduced with the development of new Internet service architectures, especially with the Di®erentiated Services. We present measurements and analysis of various packet and flow statistics to aid in classifying or di®erentiating tra±c flows according to the application nature. Our study on methods tra±c classification includes the background analysis of tra±c traces to detect applications of varying nature by measuring packet inter-arrival times, packet lengths, flow inter-arrival times, and packet and flow shares of total tra±c. Most promising results with a single statistic are achieved when classifying tra±c based on packet inter-arrival patterns. The interarrival time distributions of packets seem to be able to divide the tra±c into two distinguishable classes. However, the division to three or more classes remains as somewhat ambiguous issue and needs further research. However, the results also indicate that no single statistic is able to classify application flows with reasonable certainty but that this might be achieved when several statistics and their analysis results are combined. A good method of increasing the classification result would be to increase the dimensionality of the classification. For instance, combining the classification results of packet IAT and packet length distributions would almost certainly lead to the detection of applications of di®erent nature.