Share Email Print

Proceedings Paper

Capabilities of application-level traffic measurements to differentiate and classify Internet traffic
Author(s): Mika Ilvesmaeki; Marko Luoma
Format Member Price Non-Member Price
PDF $17.00 $21.00

Paper Abstract

The use of network based traffic classification to differentiate aggregate traffic has been introduced with the development of new Internet service architectures, especially with the Differentiated Services. We present measurements and analysis of various packet and flow statistics to aid in classifying or differentiating traffic flows according to the application nature. Our study on methods traffic classification includes the background analysis of traffic traces to detect applications of varying nature by measuring packet inter-arrival times, packet lengths, flow inter-arrival times, and packet and flow shares of total traffic. Most promising results with a single statistic are achieved when classifying traffic based on packet inter-arrival patterns. The interarrival time distributions of packets seem to be able to divide the traffic into two distinguishable classes. However, the division to three or more classes remains as somewhat ambiguous issue and needs further research. However, the results also indicate that no single statistic is able to classify application flows with reasonable certainty but that this might be achieved when several statistics and their analysis results are combined. A good method of increasing the classification result would be to increase the dimensionality of the classification. For instance, combining the classification results of packet IAT and packet length distributions would almost certainly lead to the detection of applications of different nature.

Paper Details

Date Published: 24 July 2001
PDF: 10 pages
Proc. SPIE 4523, Internet Performance and Control of Network Systems II, (24 July 2001); doi: 10.1117/12.434318
Show Author Affiliations
Mika Ilvesmaeki, Helsinki Univ. of Technology (Finland)
Marko Luoma, Helsinki Univ. of Technology (Finland)

Published in SPIE Proceedings Vol. 4523:
Internet Performance and Control of Network Systems II
Robert D. van der Mei; Frank Huebner-Szabo de Bucs, Editor(s)

© SPIE. Terms of Use
Back to Top
Sign in to read the full article
Create a free SPIE account to get access to
premium articles and original research
Forgot your username?