Implementation of P2P Traffic Identification System

Abstract:

By analyzing packets of the transport layer and the traffic flow statistic characteristics in the peer-to-peer (P2P) applications, a new P2P traffic identification system is presented. The new method in the system relies on the observation of the first few data packets of a TCP/UDP connection. It not only can identify more P2P applications, but also can identify the known and unknown P2P applications even if the data of them is encrypted. According to the results by passing a large number of tests, the system has higher identify-rate to identify the P2P applications and lower false negative and false positive. It has good effects in the actual network.

• Periodical: Applied Mechanics and Materials (Volumes 44-47)
• Pages: 3318-3321
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.44-47.3318
• Online since: December 2010
• Authors: Shuang Yang, Ye Du, Ru Hui Zhang
• Keywords: Peer-to-Peer (P2P), Traffic Identification, Winpcap

References

[1] ZHOU Shijie, QIN Zhiguang and WU Chunjiang: Research on the Technology of Peer-to-Peer Network Traffic Identification Vol. 13 (2007), p.14–18, in Chinese.

[2] L. Bernaille, R. Teixeira, Is. Akodjenou et al.: Traffic Classification On The Fly Vol. 36 (2006), pp.23-26.

[3] F. Constantinou and P. Mavrommatis: Identifying Known and Unknown Peer-to-Peer Traffic. Fifth IEEE International Symposium on Network Computing and Applications, (2006).

DOI: 10.1109/nca.2006.34

[4] Min Zhang, W. John, KC Claffy et al.: State of the Art in Traffic Classification: A Research Review. PAM, (2009).

[5] EMule: http: /en. wikipedia. org/wiki/EMule.

[6] Liu Weiguang and Chen Liwei: Research of P2P searching technology Based on DHT Vol. 22 (2006), pp.131-133.

[7] PPfilm: http: /www. ppfilm. cn.

[8] Winpcap: http: /en. wikipedia. org/wiki/Winpcap.