dc.contributor.author |
Lee, Dong Jin |
en |
dc.contributor.author |
Brownlee, John |
en |
dc.date.accessioned |
2012-03-04T20:51:30Z |
en |
dc.date.issued |
2007 |
en |
dc.identifier.citation |
COMPUT COMMUN REV 37(3):19-27 Jul 2007 |
en |
dc.identifier.issn |
0146-4833 |
en |
dc.identifier.uri |
http://hdl.handle.net/2292/12714 |
en |
dc.description.abstract |
Flow based analysis has been considered a simple and effective approach in network analysis. 5-tuple (unidirectional) flows are used in many network traffic, however, often these analyses require bidirectional packet matching to observe the interactions. Separating the flows into two categories as one-way (packets in one direction only) and two-way (packets in both directions) flows can yield further insight. We have examined traces of Auckland traffic for 2000, 2003 and 2006, and analyzed their one-way and two-way flows. We observed several behaviors and the changes in flow sizes and their lifetimes over time. In our traces, we observe that one-way flows are mostly malicious, re-transmissions, and some are long-lived. Two-way flows are mostly normal end-toend transmissions with their lifetimes/RTTs decreasing, their sizes increasing, and many short-lived flows mostly depict errors in TCP. Also, we observe similarity between one-way and two-way flow sizes for their lifetimes |
en |
dc.publisher |
ACM New York, NY, USA |
en |
dc.relation.ispartofseries |
SIGCOMM Computer Communications Review |
en |
dc.rights |
Items in ResearchSpace are protected by copyright, with all rights reserved, unless otherwise indicated. Previously published items are made available in accordance with the copyright policy of the publisher.
Details obtained from http://www.sherpa.ac.uk/romeo/issn/0146-4833/ |
en |
dc.rights.uri |
https://researchspace.auckland.ac.nz/docs/uoa-docs/rights.htm |
en |
dc.title |
Passive measurement of one-way and two-way flow lifetimes |
en |
dc.type |
Journal Article |
en |
pubs.begin-page |
17 |
en |
pubs.volume |
37 |
en |
dc.rights.holder |
Copyright: ACM |
en |
pubs.author-url |
http://delivery.acm.org.ezproxy.auckland.ac.nz/10.1145/1280000/1273448/p17-lee.pdf?ip=130.216.15.64&acc=ACTIVE%20SERVICE&CFID=67303519&CFTOKEN=96219813&__acm__=1329873947_4ae7f7a95a698ee9633c20088af740e1 |
en |
pubs.end-page |
28 |
en |
pubs.publication-status |
Published |
en |
dc.rights.accessrights |
http://purl.org/eprint/accessRights/RestrictedAccess |
en |
pubs.subtype |
Article |
en |
pubs.elements-id |
74618 |
en |
pubs.record-created-at-source-date |
2010-09-01 |
en |