Detection and Tracking of Skype by Exploiting Cross Layer Information in a Live 3G Network

  • Philipp Svoboda
  • Esa Hyytiä
  • Fabio Ricciato
  • Markus Rupp
  • Martin Karner
Part of the Lecture Notes in Computer Science book series (LNCS, volume 5537)


This paper introduces a new method to detect and track Skype traffic and users by exploiting cross layer information available within 3G mobile cellular networks. In a 3G core network all flows can be analyzed on a per user basis. A detected Skype message is therefore related to a specific user. This information enables user profiles that provide a relationship between the mobile station and the characteristics of the corresponding Skype instance, which remain unchanged for long periods of time. Based on this information, our computationally lightweight method is able to classify Skype flows accurately. Moreover, the method is, by design, robust against false positives. Based on test traces from a live network, our new method achieves a similar detection performance as publicly available tools, yet with much less complexity.


Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.


  1. 1.
    Ricciato, F., Svoboda, P., Hasenleithner, E., Fleischer, W.: On the Impact of Unwanted Traffic onto a 3G Network. In: Proc. of the SECPERU 2006, vol. 36(4), pp. 49–56 (2006)Google Scholar
  2. 2.
    Kuan-Ta, C., Chun-Ying, H., Polly, H., Chin-Laung, L.: Quantifying Skype user satisfaction. In: Proc. of the SIGCOMM 2006, vol. 36(4), pp. 399–410 (2006)Google Scholar
  3. 3.
    Bonfiglio, D., Mellia, M., Meo, M., Rossi, D., Tofanelli, P.: Revealing Skype traffic: when Randomness plays with you. In: Proc. of the SIGCOMM 2007, vol. 37(4), pp. 37–48 (2007)Google Scholar
  4. 4.
    Bonfiglio, D., Mellia, M., Meo, M., Ritacca, N., Rossi, D.: Tracking down Skype traffic. In: Proc. of Infocom 2008, p. 5 (2008)Google Scholar
  5. 5.
    Holma, H., Toskala, A.: WCDMA for UMTS, Radio Access For Third Generation Mobile Communications, 3rd edn. Wiley, Chichester (2004)Google Scholar
  6. 6.
    Ricciato, F., Svoboda, P., Motz, J., Fleischer, W.: Traffic monitoring and analysis in 3g networks: lessons learned from the METAWIN project. e&i Elektrotechnik und Informationstechnik 123(7-8), 22–28 (2006)Google Scholar
  7. 7.
    Baset, S.A., Schulzrinne, H.G.: An analysis of the skype peer-to-peer internet telephony protocol. In: Proc. of 25th IEEE ICC, April 2006, vol. 1, pp. 1–11 (2006)Google Scholar
  8. 8.
    Biondi, P., Desclaux, F.: Silver needle in the skype. In: Proc. of Black Hat Europe 2006, vol. 1, p. 25 (2006)Google Scholar
  9. 9.
    Ricciato, F., Vacirca, F., Svoboda, P.: Diagnosis of Capacity Bottlenecks via Passive Monitoring in 3G Networks: an Empirical Analysis. Computer Networks 57, 1205–1231 (2007)CrossRefMATHGoogle Scholar
  10. 10.
    Rossi, D., Valenti, S., Veglia, P., Bonfiglio, D., Mellia, M., Meo, M.: Pictures from the skype. In: Proc. of ACM SIGMETRICS Demo Competition, vol. 1, p. 7 (2008)Google Scholar
  11. 11.
    Mellia, M., Carpani, A., Lo Cigno, R.: Measuring IP and TCP behavior on edge nodes. In: Proc. of Globecom 2002, vol. 1, p. 5 (2002)Google Scholar
  12. 12.
    Svoboda, P., Ricciato, F.: Composition of GPRS and UMTS traffic: snapshots from a live network. In: Proc. of the IPS MoMe 2006, vol. 4, pp. 42–54 (2006)Google Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2009

Authors and Affiliations

  • Philipp Svoboda
    • 1
  • Esa Hyytiä
    • 2
  • Fabio Ricciato
    • 2
  • Markus Rupp
    • 1
  • Martin Karner
    • 3
  1. 1.INTHFT DepartmentVienna University of TechnologyViennaAustria
  2. 2.Forschungszentrum Telekommunikation WienViennaAustria
  3. 3.mobilkom austria AGViennaAustria

Personalised recommendations