A Novel Method of P2P Traffic Classification Based on TCP Flow Analysis

Peer-to-Peer (P2P) applications have overtaken web stream as the most significant portions on the high-speed network, so P2P applications identification is important to a broad range of network operations. By deriving the transport/network layer headers of the packets of TCP flow, we obtained some attributes of all kinds of P2P traffic without relying on packet payload and port number, which leaded to a novel method for P2P traffic identification based on support vector machine (SVM). The method only needed to deal with the TCP packet of SYN and SYN+ACK flags. Experiment results show this method classifies the traffic achieved the high accuracy.