38th Annual IEEE Conference on Local Computer Networks (2012)
Clearwater Beach, FL, USA USA
Oct. 22, 2012 to Oct. 25, 2012
Philip Branch , Centre for Advanced Internet Architectures, Swinburne University of Technology, Melbourne, Australia
Jason But , Centre for Advanced Internet Architectures, Swinburne University of Technology, Melbourne, Australia
In this paper we describe the construction and performance of classifiers able to identify Variable Rate VoIP traffic flows rapidly, reliably and independently of the application version that generated it. We show that features calculated on short sequences of packets extracted from the flow (sub-flows) are sufficient to identify VoIP flows with Recall of 99% and Precision of 90%. The features we used are based on mean packet length, autocorrelation and the ratio of data transmitted in either direction of a bi-directional flow. Even though the codecs we use to generate VoIP traffic are quite different, we show that by using selected features that capture the nature of variable bit rate voice traffic, a classifier trained on traffic generated by one version of VoIP can reliably recognize traffic generated by another version.
Codecs, Protocols, Internet, Bit rate, Robustness, Games, Correlation
Philip Branch, Jason But, "Rapid and generalized identification of packetized voice traffic flows", 38th Annual IEEE Conference on Local Computer Networks, vol. 00, no. , pp. 85-92, 2012, doi:10.1109/LCN.2012.6423690