Skip to main content

Unmasking the Growing UDP Traffic in a Campus Network

  • Conference paper
Passive and Active Measurement (PAM 2012)

Part of the book series: Lecture Notes in Computer Science ((LNCCN,volume 7192))

Included in the following conference series:

Abstract

Transmission control protocol (TCP) has been the dominating protocol for Internet traffic for the past decades. Most network research based on traffic analysis (e.g., router buffer sizing and traffic classification) has been conducted assuming the dominance of TCP over other protocols. However, a few recent traffic statistics are showing a sign of significant UDP traffic growth at various points of Internet links [21]. In this paper we show that the UDP traffic has grown significantly in recent years on our campus network; we have observed a 46-fold increase in volume (from 0.47% to 22.0% of total bytes) in the past four years. The trace collected in 2011 shows that the grown volume is not from a small number of UDP hosts nor port numbers. In addition, the recent UDP flows are not sent at constant bit rate (CBR) for most cases, and the aggregated traffic shows burstiness close to TCP traffic.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 54.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 69.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Endace, http://www.endace.com

  2. Samplepoint-F Traces from MAWI Working Group Traffic archive (2006-2011), http://mawi.wide.ad.jp/mawi

  3. What is μTorrent’s μtp?, http://www.utorrent.com/help/documentation/utp

  4. CAIDA’s Passive Network Monitor Statistics, http://www.caida.org/data/realtime/passive/

  5. Appenzeller, G., Keslassy, I., McKeown, N.: Sizing Router Buffers. In: Proc. ACM SIGCOMM (2004)

    Google Scholar 

  6. Beheshti, N., Ganjali, Y., Ghobadi, M., McKeown, N., Salmon, G.: Experimental Study of Router Buffer Sizing. In: Proc. ACM SIGCOMM IMC (2008)

    Google Scholar 

  7. Dhamdhere, A., Jiang, H., Dovrolis, C.: Buffer Sizing for Congested Internet Links. In: Proc. IEEE INFOCOM (2005)

    Google Scholar 

  8. Finamore, A., Mellia, M., Meo, M., Rossi, D.: KISS: Stochastic Packet Inspection Classifier for UDP Traffic. IEEE/ACM Trans. Netw. 18, 1505–1515 (2010)

    Article  Google Scholar 

  9. Fu, T.Z.J., Hu, Y., Shi, X., Chiu, D.M., Lui, J.C.S.: PBS: Periodic Behavioral Spectrum of P2P Applications. In: Moon, S.B., Teixeira, R., Uhlig, S. (eds.) PAM 2009. LNCS, vol. 5448, pp. 155–164. Springer, Heidelberg (2009)

    Chapter  Google Scholar 

  10. Henderson, T., Kotz, D., Abyzov, I.: The Changing Usage of a Mature Campus-wide Wireless Network. In: Proc. ACM Mobicom (2004)

    Google Scholar 

  11. Karagiannis, T., Broido, A., Faloutsos, M., Claffy, K.: Transport Layer Identification of P2P Traffic. In: Proc. ACM SIGCOMM IMC (2004)

    Google Scholar 

  12. Karagiannis, T., Papagiannaki, K., Faloutsos, M.: BLINC: Multilevel Traffic Classification in thee Dark. In: Proc. ACM SIGCOMM (2005)

    Google Scholar 

  13. Kim, H., Claffy, K., Fomenkov, M., Barman, D., Faloutsos, M., Lee, K.: Internet Traffic Classification Demystified: Myths, Caveats, and the Best Practices. In: Proc. ACM CoNEXT (2008)

    Google Scholar 

  14. Lee, D., Carpenter, B., Brownlee, N.: Observations of UDP to TCP Ratio and Port Numbers. In: Proc. IEEE ICIMP (2010)

    Google Scholar 

  15. Maier, G., Feldmann, A., Paxson, V., Allman, M.: On Dominant Characteristics of Residential Broadband Internet Traffic. In: Proc. ACM SIGCOMM IMC (2009)

    Google Scholar 

  16. Olivier, P., Benameur, N.: Flow Level IP Traffic Characterization. In: Proc. ITC (2001)

    Google Scholar 

  17. Qian, F., Gerber, A., Mao, Z., Sen, S., Spatscheck, O., Willinger, W.: TCP Revisited: A Fresh Look at TCP in the Wild. In: Proc. ACM SIGCOMM IMC (2009)

    Google Scholar 

  18. Rodrigues, L., Guardieiro, P.: A Spatial and Temporal Analysis of Internet Aggregate Traffic at the Flow Level. In: Proc. IEEE GLOBECOM (2004)

    Google Scholar 

  19. Sommers, J., Barford, P., Greenberg, A., Willinger, W.: An SLA Perspective on the Router Buffer Sizing Problem. ACM SIGMETRICS Perform. Eval. Rev. 35, 40–51 (2008)

    Article  Google Scholar 

  20. Thopmson, K., Miller, G., Wilder, R.: Wide-area Internet Traffic Patterns and Characteristics. IEEE Network 11, 10–23 (1997)

    Google Scholar 

  21. Zhang, M., Dusi, M., John, W., Chen, C.: Analysis of UDP Traffic Usage on Internet Backbone Links. In: Proc. IEEE/IPSJ SAINT (2009)

    Google Scholar 

  22. Kim, M., Won, Y., Hong, J.: Characteristic Analysis of Internet Traffic from the Perspective of Flows. Elsevier Computer Communications 29, 1639–1652 (2005)

    Article  Google Scholar 

  23. Park, K., Willinger, W.: Self-Similar Network Traffic and Performance Evaluation. John Wiley & Sons, Inc., New York (2002)

    Google Scholar 

  24. Abry, P., Veitch, D.: Wavelet Analysis of Long-Range-Dependent Traffic. IEEE Trans. on Information Theory 44, 2–15 (1998)

    Article  MathSciNet  MATH  Google Scholar 

  25. Zhang, Z., Ribeiro, V., Moon, S., Diot, C.: Small-Time Scaling Behaviors of Internet Backbone Traffic: An Empirical Study. In: Proc. IEEE INFOCOM (2003)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2012 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Lee, C., Lee, D.K., Moon, S. (2012). Unmasking the Growing UDP Traffic in a Campus Network. In: Taft, N., Ricciato, F. (eds) Passive and Active Measurement. PAM 2012. Lecture Notes in Computer Science, vol 7192. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-28537-0_1

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-28537-0_1

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-28536-3

  • Online ISBN: 978-3-642-28537-0

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics