loading
Documents

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Jawad Khalife 1 ; Amjad Hajjar 1 and Jesús Díaz-Verdejo 2

Affiliations: 1 Lebanese University, Lebanon ; 2 University of Granada, Spain

ISBN: 978-989-8425-69-0

Keyword(s): Network traffic identification, Deep packet inspection, Payload truncation.

Related Ontology Subjects/Areas/Topics: Data Communication Networking ; Network Monitoring and Control ; Network Protocols ; Telecommunications ; Traffic Measurement, Analysis, Modeling and Visualization

Abstract: The identification of the nature of the traffic flowing through a TCP/IP network is a relevant target for traffic engineering and security related tasks. Traditional methods based on port assignments are no longer valid due to the use of ephemeral ports and ciphering. Despite the privacy concerns it arises, Deep Packet Inspection (DPI) is one of the most successful current techniques. Nevertheless, the performance of DPI is strongly limited by computational issues related to the huge amount of data it needs to handle, both in terms of number of packets and the length of the packets. This paper addresses the sensitivity of OpenDPI, one of the most powerful freely available DPI systems, when truncation of the payloads of the monitored traffic is applied. The results show that it is highly dependent on the protocol being monitored.

PDF ImageFull Text

Download
CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 35.168.112.145

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Khalife, J.; Hajjar, A. and Díaz-Verdejo, J. (2011). PERFORMANCE OF OPENDPI TO IDENTIFY TRUNCATED NETWORK TRAFFIC.In Proceedings of the International Conference on Data Communication Networking and Optical Communication System - Volume 1: DCNET, (ICETE 2011) ISBN 978-989-8425-69-0, pages 51-56. DOI: 10.5220/0003516000510056

@conference{dcnet11,
author={Jawad Khalife. and Amjad Hajjar. and Jesús Díaz{-}Verdejo.},
title={PERFORMANCE OF OPENDPI TO IDENTIFY TRUNCATED NETWORK TRAFFIC},
booktitle={Proceedings of the International Conference on Data Communication Networking and Optical Communication System - Volume 1: DCNET, (ICETE 2011)},
year={2011},
pages={51-56},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0003516000510056},
isbn={978-989-8425-69-0},
}

TY - CONF

JO - Proceedings of the International Conference on Data Communication Networking and Optical Communication System - Volume 1: DCNET, (ICETE 2011)
TI - PERFORMANCE OF OPENDPI TO IDENTIFY TRUNCATED NETWORK TRAFFIC
SN - 978-989-8425-69-0
AU - Khalife, J.
AU - Hajjar, A.
AU - Díaz-Verdejo, J.
PY - 2011
SP - 51
EP - 56
DO - 10.5220/0003516000510056

Login or register to post comments.

Comments on this Paper: Be the first to review this paper.