Packet size distribution tendencies in computer network flows

Author

Garsva, Eimantas ; Paulauskas, Nerijus ; Grazulevicius, Gediminas

Author_Institution

Dept. of Comput. Eng., Vilnius Gediminas Tech. Univ., Vilnius, Lithuania

fYear

2015

fDate

21-21 April 2015

Firstpage

1

Lastpage

6

Abstract

Network flows are easy to get and simple to store network activity data. The challenge is to interpret them efficiently from security and network engineering standpoint as payload and application layer protocol specific information is missing. The article presents the statistical analysis of network flows with the emphasis on packet size distribution. Existing packet size distribution researches were reviewed. Packet size distribution Cumulative Distribution Functions (CDFs) were produced from existing academic computer network data. The CDFs for protocols TCP, UDP, ICMP and popular application layer protocols (HTTP, DNS) were analysed. Network traffic statistics were further visualized using radar graph. Article provides reusable statistical analysis steps and statistical trends for academic computer network.

Keywords

computer network security; statistical analysis; transport protocols; CDF; DNS; HTTP; ICMP; IDP; TCP; academic computer network data; application layer protocol; computer network flow; cumulative distribution function; network traffic statistics; packet size distribution tendency; radar graph; statistical analysis steps; IP networks; Internet; Ports (Computers); Protocols; Servers; Statistical analysis; NetFlow; computer network; network traffic; packet size distribution;

fLanguage

English

Publisher

ieee

Conference_Titel

Electrical, Electronic and Information Sciences (eStream), 2015 Open Conference of

Conference_Location

Vilnius

Type

conf

DOI

10.1109/eStream.2015.7119483

Filename

7119483