Can we trust the inter-packet time for traffic classification?

Mohamad Jaber 1, * Roberto Cascella 1 Chadi Barakat 1
* Auteur correspondant
1 PLANETE - Protocols and applications for the Internet
Inria Grenoble - Rhône-Alpes, CRISAM - Inria Sophia Antipolis - Méditerranée
Abstract : The identification of Internet applications is important for ISPs and network administrators to protect the network from unwanted traffic and prioritize some major applications. Statistical methods are widely used since they allow to classify applications according to their statistical signatures. They combine the statistical analysis of flow parameters, such as packet size and inter-packet time, with machine learning techniques. Previous works are mainly based on the packet size and the directions of the packets. In this work we make a complete study about the interpacket time to prove that it is also a valuable information for the classification of Internet traffic. We discuss how to isolate the noise due to the network conditions and extract the time generated by the application. We present a model to preprocess the inter-packet time and use the result as input to the learning process. We discuss an iterative approach for the on line identification of the applications and we evaluate our method on two different real traces. The results show that the inter-packet time is an important parameter to classify Internet traffic.
Type de document :
[Research Report] 2011
Liste complète des métadonnées

Littérature citée [11 références]  Voir  Masquer  Télécharger
Contributeur : Chadi Barakat <>
Soumis le : vendredi 21 janvier 2011 - 15:22:18
Dernière modification le : mercredi 11 avril 2018 - 01:53:23
Document(s) archivé(s) le : mardi 6 novembre 2012 - 11:56:10


Fichiers produits par l'(les) auteur(s)




Mohamad Jaber, Roberto Cascella, Chadi Barakat. Can we trust the inter-packet time for traffic classification?. [Research Report] 2011. 〈inria-00546794〉



Consultations de la notice


Téléchargements de fichiers