On metrics to distinguish Skype flows from HTTP traffic

2007 Latin American Network Operations and Management Symposium - LANOMS 2007

Volumn , Issue , 2007, Pages 57-66

  Freire, Emanuel P ^a   Ziviani, Artur ^b   Salles, Ronaldo M ^a  

^a MILITARY INSTITUTE OF ENGINEERING   (Brazil)

^b LABORATÓRIO NACIONAL DE COMPUTAÇÃO CIENTÍFICA   (Brazil)

Author keywords

[No Author keywords available]

Indexed keywords

EXPERIMENTS; HYPERTEXT SYSTEMS; INTERNET; INTERNET PROTOCOLS; INTERNET SERVICE PROVIDERS; INTERNET TELEPHONY; NETWORK MANAGEMENT; STATISTICAL TESTS; TELEPHONE SYSTEMS; VOICE/DATA COMMUNICATION SYSTEMS;

BUILDING BLOCKS; DATA SETS; HTTP TRAFFICS; INTERNET APPLICATIONS; NETWORK DEVICES; OR NETWORKS;

HTTP;

EID: 48049094543     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/LANOMS.2007.4362460     Document Type: Conference Paper

References (29)

1. IANA, "Port numbers," http://www.iana.org/assignments/port- numbers.
2. C. Fraleigh, S. Moon, B. Lyles, C. Cotton, M. Khan, D. Moll, R. Rockell, T. Seely, and C. Diot, "Packet-level traffic measurements from the sprint ip backbone," IEEE Network, vol. 17, no. 6, pp. 6-16, 2003.
3. T. Karagiannis, A. Broido, N. Brownlee, K. C. Claffy, and M. Faloutsos, "Is p2p dying or just hiding?" in GLOBECOM 2004: Proceedings of IEEE Global Telecommunications Conference, Nov 2004.
4. K. Sripanidkulchai, B. Maggs, and H. Zhang, "An analysis of live streaming workloads on the internet," in IMC '04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, 2004, pp. 41-54.
5. S. Baset and H. Schulzrinne, "An analysis of the skype peer-to-peer internet telephony protocol," in INFOCOM: Proceedings of IEEE INFOCOM'06, Apr 2006.
6. S. Ehlert, S. Petgang, T. Magedanz, and D. Sisalem, "Analysis and signature of skype VoIP session traffic," in CIIT 2006: 4th IASTED International Conference on Communications, Internet, and Information Technology, Nov/Dec 2006, pp. 83-89.
7. S. Guha, N. Daswani, and R. Jain, "An experimental study of the skype peer-to-peer VoIP system," in IPTPS'06: Proceedings of The 5th International Workshop on Peer-to-Peer Systems, February 2006, pp. 1-6.
8. T. Karagiannis, K. Papagiannaki, and M. Faloutsos, "Blinc: multilevel traffic classification in the dark," in SIGCOMM '05: Proceedings of the 2005 conference on Applications, technologies, architectures, and protocols for computer communications, 2005, pp. 229-240.
9. A. Moore and K. Papagiannaki, "Toward the accurate identification of network applications," in Proceedings of the Passive and Active Measurement Workshop (PAM2005), March/Apri 2005.
10. L. Bernaille, R. Teixeira, I. Akodkenou, A. Soule, and K. Salamatian, "Traffic classification on the fly," SIGCOMM Comput. Commun. Rev., vol. 36, no. 2, pp. 23-26, 2006.
11. J. Ma, K. Levchenko, C. Kreibich, S. Savage, and G. M. Voelker, "Unexpected means of protocol inference," in IMC '06: Proceedings of the 6th ACM SIGCOMM on Internet measurement, 2006, pp. 313-326.
12. W. E. Leland, M. S. Taqqu, W. Willinger, and D. V. Wilson, "On the self-similar nature of ethernet traffic (extended version)," IEEE /ACM Transactions on Networking, vol. 2, no. 1, pp. 1-15, Feb 1994.
13. M. E. Crovella and A. Bestavros, "Self-similarity in World Wide Web traffic: evidence and possible causes," IEEE /ACM Transactions on Networking, vol. 5, no. 6, pp. 835-846, Dec 1997.
14. B. A. Mah, "An empirical model of http network traffic," in INFOCOM '97: Proceedings of Sixteenth Annual Joint Conference of the IEEE Computer and Communications Societies, 1997.
15. P. Barford and M. Crovella, "Generating representative web workloads for network and server performance evaluation," in SIGMETRICS '98: Proceedings of the 1998 ACM SIGMETRICS joint international conference on Measurement and modeling of computer systems, 1998, pp. 151-160.
16. C. Cunha, A. Bestavros, and M. Crovella, "Characteristics of www client-based traces," Boston, MA, USA, Tech. Rep., 1995.
17. H.-K. Choi and J. O. Limb, "A behavioral model of web traffic," in ICNP '99: Proceedings of the Seventh Annual International Conference on Network Protocols. IEEE Computer Society, 1999, pp. 327-334.
18. M. Arlitt and C. Williamson, "A synthetic workload model for internet mosaic traffic," in Proceedings of the 1995 Summer Computer Simulation Conference, Jul 1995, pp. 852-857.
19. A. Reyes-Lecuona, E. González-Parada, E. Casilari, J. C. Casasola, and A. D'iaz-Estrella, "A page-oriented www traffic model for wireless system simulations," in ITC: Proceedings of 16th International Teletraffic Congress, Jun 1999, pp. 1271-1280.
20. H. Abrahamsson and B. Ahlgren, "Using empirical distributions to characterize web client traffic and to generate synthetic traffic," in GLOBECOM'00: Proceedings of IEEE Global Telecommunications Conference, Nov 2000.
21. C. Kruegel, G. Vigna, and W. Robertson, "A multi-model approach to the detection of web-based attacks," Computer Networks, vol. 48, no. 5, pp. 717-738, 2005.
22. J. M. Estévez-Tapiador, P. García-Teodoro, and J. E. Díaz-Verdejo, "Measuring normality in http traffic for anomaly-based intrusion detection," Computer Networks, vol. 45, no. 2, pp. 175-193, Jun 2004.
23. K. Suh, D. R. Figueiredo, J. Kurose, and D. Towsley, "Characterizing and detecting relayed traffic: A case study using skype," in INFOCOM: Proceedings of IEEE INFOCOM'06, Apr 2006.
24. T. Berners-Lee, R. Fielding, and H. Frystyk, "Hypertext transfer protocol - HTTP/1.0," Internet Request for Comments 1945, May 1996.
25. R. Fielding, J. Gettys, J. Mogul, H. Frystyk, L. Masinter, P. Leach, and T. Berners-Lee, "Hypertext transfer protocol - HTTP/1.1," Internet Request for Comments 2616, Jun 1999.
26. V. Jacobson, C. Leres, and S. McCanne, "tcpdump," http://www.tcpdump.org/.
27. NIST/SEMATECH, "e-handbook of statistical methods," http://www.itl.nist.gov/div898/handbook/.
28. N. Ye, X. Li, Q. Chen, S. M. Emran, and M. Xu, "Probabilistic techniques for intrusion detection based on computeraudit data," IEEE Transactions on Systems, Man and Cybernetics, Part A, vol. 31, no. 4, pp. 266-274, Jul 2001.
29. J. Elson, "tcpflow," www.circlemud.org/~jelson/software/ tcpflow/.