TCP和UDP网络流量对比分析研究.docVIP

TCP和UDP网络流量对比分析研究 　　摘 要:网络带宽不断增长,越来越多的音/视频、在线游戏等应用成为网络空间的主体。基于实时性考虑,这些新兴应用协议多选择UDP作为其底层的传输协议,使得UDP流量呈上升趋势,而以往的流量测量工作一般基于TCP进行,忽略了UDP协议。对国内某骨干网流量进行了连续12 h的在线测量,在传输层和应用层分别对TCP和UDP及其应用层协议的流的总数、长度分布、持续时间分布、流的速度分布等进行了详尽的分析,并对TCP和UDP的应用层协议流的大小、长短、快慢作了详细的分类。为网络流的分类技术、网络行为发现、网络设计等提供了数据支持。 　　 　　关键词:TCP; UDP; 协议特征; 流量分类; 端口 　　中图分类号:TP393.09文献标志码:A 　　文章编号:1001-3695(2010)06-2192-06 　　doi:10.3969/j.issn.1001-3695.2010.06.056 　　 　　Comparative analysis on TCP and UDP network traffic 　　 　　ZHANG Yi??bin??1,2a,2b??, ZHANG Zhi??bin??1,2b??, ZHAO Yong??1,2a,2b??, GUO Li??1,2b?? 　　 　　(1.Institute of Computing Technology, Chinese Academy of Sciences, Beijing 100190, China; 2.a.Graduate School, b. National Engineering Laboratory for Information Security Technologies, Chinese Academy of Sciences, Beijing 100049, China) 　　 　　Abstract:With the increase of network bandwidth, more and more new applications like audio, video and online games become the major force in network traffic. Based on real??time considerations, these new applications mostly used UDP as transport layer protocol, which made UDP traffic increase. While previous traffic measurements were generally based on TCP and ignore UDP protocol. This paper made a continuous 12??hour on??line measurement on a backbone environment. Firstly, it did a detailed analysis on TCP and UDP in transport and application layer, including total number of the flow, length distribution, duration distribution, and flow rate distribution. Secondly, gave a detailed classification on application layer protocols according to flow size, length, and speed. Our analysis and conclusions can present a data support for other studies as the traffic classification, network behavior analysis, and the network design etc. 　　Key words:TCP; UDP; protocol characteristics; traffic classification; port 　　 　　0 引言 　　随着网络带宽不断增长,网络行为模式日益复杂,各种新网络应用的产生,使人们对于网络的依赖性越来越强,同时也对网络提出了更高的要求。传统的基于文字和图片的网络服务已经不能满足人们的需求,越来越多的音/视频、在线游戏等内容生动且互动性强的网络应用开始成为网络空间的主体。根据2008年I