Skip to Content
[CAIDA - Cooperative Association for Internet Data Analysis logo]
The Cooperative Association for Internet Data Analysis
www.caida.org > publications : papers : 2008 : classification_demystified
Internet Traffic Classification Demystified: Myths, Caveats, and the Best Practices
H. Kim, k. claffy, M. Fomenkov, D. Barman, M. Faloutsos, and K. Lee, “Internet Traffic Classification Demystified: Myths, Caveats, and the Best Practices'', in ACM SIGCOMM CoNEXT, New York, NY, Dec 2008, ACM SIGCOMM CoNEXT.
|  View full paper:    PDF    Supplemental data    |  View citation:    BibTeX  |

Internet Traffic Classification Demystified: Myths, Caveats, and the Best Practices

Hyunchul Kim 1
kc claffy 2
Marina Fomenkov 2
Dhiman Barman 3
Michalis Faloutsos 3
KiYoung Lee 4
1

Seoul National University, KR

2

Cooperative Association for Internet Data Analysis - CAIDA
San Diego Supercomputer Center,
University of California, San Diego

3

University of California, Riverside

4

University of California, San Diego

Recent research on Internet traffic classification algorithms has yielded a flurry of proposed approaches for distinguishing types of traffic, but no systematic comparison of the various algorithms. This fragmented approach to traffic classification research leaves the operational community with no basis for consensus on what approach to use when, and how to interpret results. In this work we critically revisit traffic classification by conducting a thorough evaluation of three classification approaches, based on transport layer ports, host behavior, and flow features. A strength of our work is the broad range of data against which we test the three classification approaches: seven traces with payload collected in Japan, Korea, and the US. The diverse geographic locations, link characteristics and application traffic mix in these data allowed us to evaluate the approaches under a wide variety of conditions. We analyze the advantages and limitations of each approach, evaluate methods to overcome the limitations, and extract insights and recommendations for both the study and practical application of traffic classification. We make our software, classifiers, and data available for researchers interested in validating or extending this work.

  Last Modified: Fri May-3-2013 15:20:5 PDT
  Page URL: http://www.caida.org/publications/papers/2008/classification_demystified/index.xml