Can we trust the inter-packet time for traffic classification? - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Reports (Research Report) Year : 2011

Can we trust the inter-packet time for traffic classification?

Abstract

The identification of Internet applications is important for ISPs and network administrators to protect the network from unwanted traffic and prioritize some major applications. Statistical methods are widely used since they allow to classify applications according to their statistical signatures. They combine the statistical analysis of flow parameters, such as packet size and inter-packet time, with machine learning techniques. Previous works are mainly based on the packet size and the directions of the packets. In this work we make a complete study about the interpacket time to prove that it is also a valuable information for the classification of Internet traffic. We discuss how to isolate the noise due to the network conditions and extract the time generated by the application. We present a model to preprocess the inter-packet time and use the result as input to the learning process. We discuss an iterative approach for the on line identification of the applications and we evaluate our method on two different real traces. The results show that the inter-packet time is an important parameter to classify Internet traffic.
Fichier principal
Vignette du fichier
ICC-Jaber.pdf (254.08 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

inria-00546794 , version 1 (21-01-2011)

Identifiers

Cite

Mohamad Jaber, Roberto Cascella, Chadi Barakat. Can we trust the inter-packet time for traffic classification?. [Research Report] 2011. ⟨inria-00546794⟩
87 View
279 Download

Altmetric

Share

Gmail Facebook X LinkedIn More