Book chapter

ŽÁDNÍK Martin. Flow Measurement Extension for Application Identification. Networking Studies IV, Selected Technical Reports. Praha: CESNET National Research and Education Network, 2010, pp. 57-70. ISBN 978-80-904173-8-0.
Publication language:english
Original title:Flow Measurement Extension for Application Identification
Title (cs):Rozšíření měření toků o identifikaci aplikace
Pages:57-70
Book:Networking Studies IV, Selected Technical Reports
Place:Praha, CZ
Year:2010
ISBN:978-80-904173-8-0
Publisher:CESNET National Research and Education Network
Keywords
application identification, flow, measurement
Annotation
Modern networks are expected to provide wide range of application-oriented services. While some applications require a network to be loss-free, low delay with low jitter, others are fault tolerant and happily trade off quality for higher bandwidth. In order to measure these requirements and subsequently provide them, network nodes must be able to determine the application in traffic carried. Since flow measurement is usually utilized to gain information about the traffic mix, we propose to extend it with L7 decoder based on signature matching to identify the part of applications that are not covered by other methods, such as port lookup, fingerprinting and behavioral analysis. As an example, we compare signature matching and port lookup on a CESNET backbone link in order to motivate our future work on a hybrid application identification system based on a combination of several approaches.
BibTeX:
@INBOOK{
   author = {Martin {\v{Z}}{\'{a}}dn{\'{i}}k},
   title = {Flow Measurement Extension for Application Identification},
   pages = {57--70},
   booktitle = {Networking Studies IV, Selected Technical Reports},
   year = {2010},
   location = {Praha, CZ},
   publisher = {CESNET National Research and Education Network},
   ISBN = {978-80-904173-8-0},
   language = {english},
   url = {http://www.fit.vutbr.cz/research/view_pub.php?id=9599}
}

Your IPv4 address: 54.242.205.33
Switch to IPv6 connection

DNSSEC [dnssec]