Research And Implement On P2P Traffic Identification

Since the emergence of peer-to-peer (P2P) networking in the late 90s, P2P applications have multiplied, evolved and established themselves as the leading "growth app" of Internet traffic workload. Peer-to-peer networking (P2P) is an application that runs on a personal computer and shares files with other users across the Internet. P2P networks work by connecting individual computers together to share files instead of having to go through a central server. Security and management on internet are meeting the new challenge because the application of P2P technology is based on its own flexible network structure.In contrast to first-generation P2P networks which used well-defined port numbers, current P2P applications have the ability to disguise their existence through the use of arbitrary ports. In this paper, we develop a systematic methodology to identify P2P flows at the transport layer, i.e., based on connection patterns of P2P networks, and without relying on packet payload.At the other hand, we also provide an efficient approach for identifying the P2P application traffic through application level signatures. And we find that the performance of signature-based network detection system is dominated by string matching of packets against many signatures. Some important factors that affect the performance of string matching algorithm was analyzed: the application context and the structure of patterns ; For some string matching algorithms and P2P applications, appropriate patterns were chosen for experiment. Experiment data indicates the performance of the algorithm is improved by making use of appropriate patterns in the P2P traffic identification.