Using of Flow Statistics for Improvement of Protocol Detection
Pavel Piskač, Jiří Novotný · 2011
This paper describes a protocol detection using statistic information about a flow extended by packet sizes and time characteristics about inter-packet gaps. The data is processed by QT clustering algorithm which divides flows into specific groups.