H. Kim, K. Claffy, M. Fomenkova, N. Browlee, D. Barman, and M. Faloutsos, "Comparison of Internet Traffic Classification Tools", in IMRG WACI 2007, Oct 2007.
|Comparison of Internet Traffic Classification Tools|
|Published:||IMRG WACI, 2007|
|Abstract:||Despite a plethora of research devoted to traffic classification adn a variety of proposed traffic classification methods, the research community still does not have definitive answers to these questions, and the task of traffic classification remains unapproachable and confusing for a practitioner. Rigorous comparison of various classification methods is challenging for three reasons. First, there is no publicly available payload trace set, so every method is evaulated using a different set of locally collected payload traces. Second, existing approaches use different techniques that rack different features, tune different parameters and use different definitions and categorization of applications. Third, more often than not, authors do not make their developed implementation codes publicly available once they publish their results. To address these challenges, we have conducted a comprehensive and coherent evaluation of three traffic classification approaches: port-based, behavior-based, and statistical. In this paper we present the result of our comparison, debunk traffic classification myths, identify caveats, and suggest practical tips.|