A Mechanism for P2P-Traffic Detection Based on Two-Fold Traffic Transmission Features
Ruchuan Wang · Computer Technology and Development · 2010
P2P traffic has taken great portions in the network traffic.While having a significant impact on the Internet,it brings serious problems such as network congestion and traffic hindrance caused by the excessive occupation in the bandwidth.Introduces methods in identifying P2P traffic and their characters,then proposes a method of P2P traffic identifying in local area network based on two-fold traffic transmission features,namely,successive port change and its unique character in the ratio of upload and download traffic volume.The novelty of the proposed method is that it only utilizes some basic statistical information of packets instead of the inspection of data payload.Experimental results show that the method has achieved some improvements in identifying payload-encrypted and unknown P2P traffic which is hard for traditional payload-method to fulfill and has low cost and proper accuracy.