A novel method of P2P traffic classification based on TCP flow analysis

Abstract

Peer-to-Peer (P2P) applications have overtaken web stream as the most significant portions on the high-speed network, so P2P applications identification is important to a broad range of network operations. By deriving the transport/network layer headers of the packets of TCP flow, we obtained some attributes of all kinds of P2P traffic without relying on packet payload and port number, which leaded to a novel method for P2P traffic identification based on support vector machine (SVM). The method only needed to deal with the TCP packet of SYN and SYN+ACK flags. Experiment results show this method classifies the traffic achieved the high accuracy. © 2012 Springer-Verlag GmbH.