Analysis of UDP Traffic Norms through Packet Sniffing on Peer-to-Peer Networks

Ahmad Musa

Abstract


A significant obstacle with current peer-to-peer (p2p) traffic monitoring and analysis involves the large number of newly emerging p2p applications possessing more intricate communication structures and traffic patterns than the traditional client-server applications. The volume of traffic generated by these applications, such as uTorrent, BitTorrent, eMule, Ares, etc., is stated to be well over half of the total internet traffic. The dynamic use of port numbers, multiple sessions, and other smart features of these applications complicate the characterization of current p2p traffic. Transport-level traffic identification is a preliminary but required step towards traffic characterization, which this article mainly addresses. The traditional traffic identification methods are mostly based on well-known port numbers. These methods are not appropriate for the identification of emerging P2P applications. This paper proposes using a packet sniffer to identify the current p2p traffic. We categorized the most current used p2p network application based on their user datagram protocol (UDP) information to analyze the traffic patterns. Using this categorization, we found that UDP provided the most features that guarantee data integrity.


Full Text:

PDF

References


Awan, A., Ferreira, R. A., Jagannathan, S., & Grama, A. (2006). Unstructured peer-to-peer networks for sharing processor cycles. Parallel Computing, 32(2), 115–135. https://doi.org/10.1016/j.parco.2005.09.002

Bauer, K., McCoy, D., Grunwald, D., & Sicker, D. (2009, December 1). BitStalker: Accurately and efficiently monitoring bittorrent traffic. IEEE Xplore. https://doi.org/10.1109/WIFS.2009.5386457

Dabir, A., & Matrawy, A. (2007, November 1). Bottleneck Analysis of Traffic Monitoring using Wireshark. IEEE Xplore. https://doi.org/10.1109/IIT.2007.4430446

Das, R., & Tuna, G. (2017). Packet tracing and analysis of network cameras with Wireshark. 2017 5th International Symposium on Digital Forensic and Security (ISDFS). https://doi.org/10.1109/isdfs.2017.7916510

Leong, R. S. C., Lai, P. K. Y., Chow, K. P., Kwan, M. Y. K., & Law, F. Y. W. (2010). Forensic Investigation of Peer-to-Peer Networks. Handbook of Research on Computational Forensics, Digital Crime, and Investigation: Methods and Solutions. https://www.igi-global.com/chapter/forensic-investigation-peer-peer-networks/39225

Liberatore, M., Erdely, R., Kerle, T., Levine, B. N., & Shields, C. (2010). Forensic investigation of peer-to-peer file sharing networks. Digital Investigation, 7, S95–S103. https://doi.org/10.1016/j.diin.2010.05.012

Musa, A., Abubakar, A., Gimba, U. A., & Rasheed, R. A. (2019). An Investigation into Peer-to-Peer Network Security Using Wireshark. 2019 15th International Conference on Electronics, Computer and Computation (ICECCO). https://doi.org/10.1109/icecco48375.2019.9043236

Musa, A., Almohannadi, H., & Alhamar, J. (2018, August 1). Malware Propagation Modelling in Peer-to-Peer Networks: A Review. IEEE Xplore. https://doi.org/10.1109/W-FiCloud.2018.00038

Neuner, S., Schmiedecker, M., & Weippl, E. R. (2016). PeekaTorrent: Leveraging P2P hash values for digital forensics. Digital Investigation, 18, S149–S156. https://doi.org/10.1016/j.diin.2016.04.011

Qadeer, M. A., Iqbal, A., Zahid, M., & Siddiqui, M. R. (2010). Network Traffic Analysis and Intrusion Detection Using Packet Sniffer. Second International Conference on Communications, Software and Networks, 313–317.

Schrader, K., Mullins, B., Peterson, G., & Mills, R. (2009). TRACKING CONTRABAND FILES TRANSMITTED USING BITTORRENT. In Advances in Digital Forensics (Vol. 306, pp. 159–173). Springer. https://link.springer.com/content/pdf/10.1007%2F978-3-642-04155-6_12.pdf

uTorrent. (2018). µTorrent - a BitTorrent client. Utorrent.Com. https://www.utorrent.com/

Wireshark. (2016). Wireshark.Org. https://www.wireshark.org/

Yu, B. (2010). Based on the network sniffer implement network monitoring. IEEE Xplore, 7, V7–1-V7-3. https://doi.org/10.1109/ICCASM.2010.5620505


Refbacks

  • There are currently no refbacks.