Some observations on individual TCP flows behavior in network traffic traces

Author

Qian, Lei ; Carpenter, Brian E.

Author_Institution

Dept. of Comput. Sci., Univ. of Auckland, Auckland, New Zealand

fYear

2011

fDate

12-14 Oct. 2011

Firstpage

354

Lastpage

359

Abstract

We propose a modified Transmission Control Protocol (TCP) flow classification method and Round Trip Time (RTT) computation method which is more precise and more dynamic than the traditional fixed timeout method, especially for long, sparse TCP flows and long RTTs. Then we present passive measurement results for TCP RTT and RTT variation in network traffic traces. Analysis shows several interesting behavior patterns in individual flows. We observe TCP flows with regular patterns of RTT distribution. Individual TCP flows may also apparently have self-similar RTT distributions. Most long-active but sparse TCP flows use port 80 with a relatively short RTT. Lastly, we show and discuss plots of TCP flows with very long RTT values.

Keywords

computer networks; pattern classification; telecommunication traffic; transport protocols; individual TCP flow; modified transmission control protocol flow classification method; network traffic trace; passive measurement; round trip time computation method; Delay; Educational institutions; Fluid flow measurement; IP networks; Internet; Protocols; Time series analysis; CDF Distribution; Flow Separation; RTT Computation; RTT Variation; TCP Flows; Time Series Plot;

fLanguage

English

Publisher

ieee

Conference_Titel

Communications and Information Technologies (ISCIT), 2011 11th International Symposium on

Conference_Location

Hangzhou

Print_ISBN

978-1-4577-1294-4

Type

conf

DOI

10.1109/ISCIT.2011.6089952

Filename

6089952