P2P traffic identification method based on node status
Yajian Zhou · Journal of Computer Applications · 2009
Random port,blurred protocol features,as well as HTTP tunneling technology have become development trends of P2P application.A new method based on node status was proposed for P2P traffic identification.Node status obtained by multi-level identification module was hashed into a table,and then a trusted list was created by this hash table.Through the definitions of the active factor,incremental factor and link cache,P2P traffic generated by port jump and protocol encryption can be identified quickly and effectively.