通信学报 ›› 2012, Vol. 33 ›› Issue (12): 25-34.doi: 10.3969/j.issn.1000-436x.2012.12.004

• 学术论文 • 上一篇    下一篇

基于UDP流量的P2P流媒体流量识别算法研究?

董仕1,2,3,4,王岗2,3,4   

  1. 1 周口师范学院 计算机科学与技术学院,河南 周口 466001
    2 东南大学 计算机科学与工程学院,江苏 南京 210092
    3 江苏省计算机网络技术重点实验室,江苏 南京 210092
    4 国家教育部计算机网络和信息集成重点实验室,江苏 南京 210092
  • 出版日期:2012-12-25 发布日期:2017-07-15
  • 基金资助:
    国家重点基础研究发展计划(“973”计划)基金资助项目;国家科技支撑计划基金资助项目

Research on P2P streaming media identification based on UDP

Shi DONG1,2,3,4,Gang WANG2,3,4   

  1. 1 School of Computer Science and Technology,Zhoukou Nor l University,Zhoukou 466001,China
    2 College of Computer Science and Engineering,Southeast University,Nanjing 210092,China
    3 Jiangsu Provincial Key Laboratory of Computer Network,Nanjing 210092,China
    4 Key Laboratory of Computer Network and Information Integration,Ministry of Education,Nanjing 210092,China
  • Online:2012-12-25 Published:2017-07-15
  • Supported by:
    The National Basic Research Program of China (973 Program);The National Science and Technology Plan Program of China

摘要:

摘 要:以几款主流的P2P流媒体网络电视作为研究对象,深入分析了其产生的流量在端口使用方面的特点和报文长度分布上的差异。通过对这些特征的总结和提取,获得了基于端口特性“在一次交互过程中,特定主机的特定端口唯一确定一种应用”等结论。在此基础上提出了一种基于带有扩展属性的流记录准确识别 P2P 应用 UDP流量的EXID算法。通过对CERNET江苏省边界10G主干信道上采集的Trace数据中5种P2P流媒体应用进行识别,并与机器学习流量识别算法进行比较,其结果表明提出的方案具有很高的查准率和查全率,时间效率高,且不易受样本比重的影响。

关键词: UDP, P2P, 流量识别, 扩展的流记录

Abstract:

Several popular P2P networks TV were studied,and their differences in port usage and packet size distribution were analyzed thoroughly.By observing the above characteristics,the conclusions that network TV application employs only one port to generate most of UDP traffic in one communicat period were summarized,and the UDP packet sizes in various network TV differ significantly.Thus,a method that can identify P2P application’s UDP traffic accurately and effectively was proposed based on extended flow records.Through identifying and verifying the five P2P streaming application traffic which was called Trace data collected from the backbone channel of CERNET (China education and research network) border in Jiangsu Province,and traffic identification results compared with machine learning algorithms show that the proposed method has a high precision rate and recall rate,high time efficient,and not susceptible to the impact of the proportion of the sample.

Key words: UDP, P2P, traffic identification, extended flow records

No Suggested Reading articles found!