Trends and Differences in Connection-Behavior within Classes of Internet Backbone Traffic

  • Wolfgang John
  • Sven Tafvelin
  • Tomas Olovsson
Conference paper

DOI: 10.1007/978-3-540-79232-1_20

Part of the Lecture Notes in Computer Science book series (LNCS, volume 4979)
Cite this paper as:
John W., Tafvelin S., Olovsson T. (2008) Trends and Differences in Connection-Behavior within Classes of Internet Backbone Traffic. In: Claypool M., Uhlig S. (eds) Passive and Active Network Measurement. PAM 2008. Lecture Notes in Computer Science, vol 4979. Springer, Berlin, Heidelberg

Abstract

In order to reveal the influence of different traffic classes on the Internet, backbone traffic was collected within an eight month period on backbone links of the Swedish University Network (SUNET). The collected data was then classified according to network application. In this study, three traffic classes (P2P, Web and malicious) are compared in terms of traffic volumes and signaling behavior. Furthermore, longitudinal trends and diurnal differences are highlighted. It is shown that traffic volumes are increasing considerably, with P2P-traffic clearly dominating. In contrast, the amount of malicious and attack traffic remains constant, even not exhibiting diurnal patterns. Next, P2P and Web traffic are shown to differ significantly in connection establishment and termination behavior. Finally, an analysis of TCP option usage revealed that Selective Acknowledgment (SACK), even though deployed by most web-clients, is still neglected by a number of popular web-servers.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2008

Authors and Affiliations

  • Wolfgang John
    • 1
  • Sven Tafvelin
    • 1
  • Tomas Olovsson
    • 1
  1. 1.Department of Computer Science and EngineeringChalmers University of TechnologyGöteborgSweden

Personalised recommendations