DocumentCode :
2499995
Title :
Flow-Based Identification of P2P Heavy-Hitters
Author :
Wagner, Arno ; Dubendorfer, Thomas ; Hammerle, Lukas ; Plattner, Bernhard
Author_Institution :
Commun. Syst. Lab., Swiss Fed. Inst. of Technol., Zurich
fYear :
2006
fDate :
26-28 Aug. 2006
Firstpage :
15
Lastpage :
15
Abstract :
One major new and often not welcome source of Internet traffic is P2P filesharing traffic. Banning P2P usage is not always possible or enforcible, especially in a university environment. A more restrained approach allows P2P usage, but limits the available bandwidth. This approach fails when users start to use non-default ports for the client software. We have developed the PeerTracker algorithm that allows detection of running P2P clients from NetFlow data in near real-time. The algorithm is especially suitable to identify clients that generate large amounts of traffic and can easily be used to find P2P heavy-hitters. A prototype system based on the PeerTracker algorithm is currently used by the network operations staff at the Swiss Federal Institute of Technology Zurich. We present measurements done on a medium sized Internet backbone and discuss accuracy issues, as well as possibilities and results from validation of the detection algorithm by direct polling in real-time
Keywords :
Internet; peer-to-peer computing; telecommunication traffic; Internet traffic; NetFlow data; P2P filesharing traffic; P2P heavy-hitters; PeerTracker algorithm; flow-based identification; medium sized Internet backbone; Bandwidth; IP networks; Internet; Monitoring; Prototypes; Size measurement; Software prototyping; Spine; Switches; Telecommunication traffic;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Internet Surveillance and Protection, 2006. ICISP '06. International Conference on
Conference_Location :
Cote d´Azur
Print_ISBN :
0-7695-2649-7
Type :
conf
DOI :
10.1109/ICISP.2006.12
Filename :
1690399
Link To Document :
بازگشت