作者: John Hurley , Emi Garcia-Palacios , Sakir Sezer
DOI: 10.4108/ICST.BROADNETS2009.7229
关键词:
摘要: With the increasing quantity and varying nature of traffic crossing internet, coupled with techniques such as fluctuating port numbers transport layer encryption, identification individual packet flows is becoming more difficult. We introduce investigate a new method for detection P2P based on activity hosts (IP addresses) involved in connection. Heuristics are generated that examine properties these used to uniquely detect non-P2P flows. The strategy has been tested two real network data traces from core internet router some classification accuracies showing higher than 99%.