Distilling the Internet's Application Mix from Packet-Sampled Traffic
Distilling the Internet's Application Mix from Packet-Sampled Traffic
复制标题
DOI：
10.1007/978-3-319-15509-8_14
复制
发表时间：
2015-03
期刊：
影响因子：
--
通讯作者：
P. Richter;N. Chatzis;Georgios Smaragdakis;A. Feldmann;W. Willinger
中科院分区：
文献类型：
--
作者：
P. Richter;N. Chatzis;Georgios Smaragdakis;A. Feldmann;W. Willinger
随着互联网的规模和所承载的流量不断增长，世界各地越来越多的网络正在依靠越来越多的不同方式来相互交换流量。因此，我们会提出一些简单的问题，例如“当今互联网的应用程序组合是什么？”可能会产生非信息性的简单答案，除非通过指定观察流量的有利位置、涉及的网络、甚至使用的互连类型来完善它们。在本文中，我们重新审视当今互联网中的应用程序组合问题，并做出两个主要贡献。首先，我们开发了一种方法，用于对欧洲和全球最大的 IXP 之一收集的数据包采样跟踪中的应用程序组合进行分类。我们证明，我们的方法可以依靠有状态分类方法对近 95% 的流量进行分类，该方法仅使用有效负载签名、通信模式和基于端口的分类作为后备。其次，我们的结果表明，当从这个有利位置观察并聚合所有 IXP 的公共对等链接时，互联网的应用程序组合与其他近期研究中报告的非常相似，这些研究依赖于不同的有利位置、对等链接或分类方法。然而，观察到的聚合应用程序组合绝不代表在各个对等链路上看到的应用程序组合。事实上，我们表明，负责 IXP 总流量大部分的 AS 的业务类型对其整体流量和主要对等链路上的流量的应用程序组合有很大影响。
As the Internet continues to grow both in size and in terms of the volume of traffic it carries, more and more networks in the different parts of the world are relying on an increasing number of distinct ways to exchange traffic with one another. As a result, simple questions such as “What is the application mix in today’s Internet?” may produce non-informative simple answers unless they are refined by specifying the vantage point where the traffic is observed, the networks that are involved, or even the type of interconnection used.In this paper, we revisit the question of the application mix in today’s Internet and make two main contributions. First, we develop a methodology for classifying the application mix in packet-sampled traces collected at one of the largest IXPs in Europe and worldwide. We show that our method can classify close to 95 % of the traffic by relying on astatefulclassification approach that uses payload signatures, communication patterns, and port-based classification only as a fallback. Second, our results show that when viewed from this vantage point and aggregated over all the IXP’s public peering links, the Internet’s application mix is very similar to that reported in other recent studies that relied on different vantage points, peering links or classification methods. However, the observed aggregate application mix is by no means representative of the application mix seen on individual peering links. In fact, we show that the business type of the ASes that are responsible for much of the IXP’s total traffic has a strong influence on the application mix of their overall traffic and of the traffic seen on their major peering links.