MODULE FOR IDENTIFYING INTERNET APPLICATIONS AND ITS INTEGRATION IN A PEER-TO-PEER MEASUREMENT TOOL
Eduardo Rocha, Hélder Veiga, Rui Valadas, Paulo Salvador, António Nogueira · 2007
In the last years there has been a huge increase in the number and variety of IP applications. An accurate mapping of traffic to applications is important for a broad range of network management and measurement tasks including traffic engineering, service differentiation, performance/failure monitoring, and security. Port-based identification approaches have become increasingly inaccurate because many applications use non-default or ephemeral port numbers or use wellknown port numbers associated with other applications. Thus, a more accurate identification demands the examination of the user's payload. This paper presents a framework for processing IP traffic flows, enabling the calculation of a set of relevant statistical parameters and the identification of the underlying IP applications by using payload analysis techniques. The proposed framework is able to achieve good identification results and will be incorporated in a totally distributed monitoring platform as a module that can be used at each probe for traffic engineering purposes.