Portal de Periódicos da CAPES

Game Traffic Classification Using Statistical Characteristics at the Transport Layer

2010; Electronics and Telecommunications Research Institute; Volume: 32; Issue: 1 Linguagem: Inglês

10.4218/etrij.10.0109.0236

2233-7326

Young-Tae Han, Hong-Shik Park,

Network Traffic and Congestion Control

ETRI JournalVolume 32, Issue 1 p. 22-32 Regular PaperFree Access Game Traffic Classification Using Statistical Characteristics at the Transport Layer Young-Tae Han, Young-Tae HanSearch for more papers by this authorHon g-Shik Park, Hon g-Shik ParkSearch for more papers by this author Young-Tae Han, Young-Tae HanSearch for more papers by this authorHon g-Shik Park, Hon g-Shik ParkSearch for more papers by this author First published: 01 February 2010 https://doi.org/10.4218/etrij.10.0109.0236Citations: 11 Young-Tae Han (phone: +82 42 350 6250, email: [email protected]) and Hong-Shik Park (email: [email protected]) are with the Department of Information and Communications, Korea Advanced Institute of Science and Technology, Daejeon, Rep. of Korea. AboutPDF ToolsExport citationAdd to favoritesTrack citation ShareShare Give accessShare full text accessShare full-text accessPlease review our Terms and Conditions of Use and check box below to share full-text version of article.I have read and accept the Wiley Online Library Terms and Conditions of UseShareable LinkUse the link below to share a full-text version of this article with your friends and colleagues. Learn more.Copy URL Share a linkShare onEmailFacebookTwitterLinkedInRedditWechat Abstract The pervasive game environments have activated explosive growth of the Internet over recent decades. Thus, understanding Internet traffic characteristics and precise classification have become important issues in network management, resource provisioning, and game application development. Naturally, much attention has been given to analyzing and modeling game traffic. Little research, however, has been undertaken on the classification of game traffic. In this paper, we perform an interpretive traffic analysis of popular game applications at the transport layer and propose a new classification method based on a simple decision tree, called an alternative decision tree (ADT), which utilizes the statistical traffic characteristics of game applications. Experimental results show that ADT precisely classifies game traffic from other application traffic types with limited traffic features and a small number of packets, while maintaining low complexity by utilizing a simple decision tree. References 1K. Jegers and M. Wiberg, "Pervasive Gaming in the Everyday World," IEEE Pervasive Computing, Vol. 5, 2006, pp. 78–85. 2S. McCreary and K. Claffy, "Trends in Wide Area IP Traffic Patterns: A View from Ames Internet Exchange," Proc. 13th ITC Specialist Seminar on Measurement and Modeling of IP Traffic, Sept. 2000, pp. 1–11. 3L. Liang, Z. Sun, and H Cruickshank, "Relative QoS Optimization for Multiparty Online Gaming in DiffServ Networks," IEEE Commun. Mag., Vol. 43, May 2005, pp. 75–83. 4 Game genres. http://en.wikipedia.org/wiki/Game_genres. 5G. Armitage, M. Claypool, and P. Branch, Networking and Online Games: Understanding and Engineering Multiplayer Internet Game, John Wiley and Sons, 2006, pp. 150–173. 6 Game chart. http://www.gamechart.co.kr/. 7A. Kind et al., "Advanced Network Monitoring Brings Life to the Awareness Plane," IEEE Commun. Mag., Vol. 46, Oct. 2008, pp. 140–146. 8V. Paxson, "Bro: A System for Detecting Network Intruders in Real-Time," Computer Networks, Vol. 31, no. 23-24, 1999, pp. 2435–2463. 9S. Sen, O. Spatscheck, and D. Wang, "Accurate, Scalable In-Network Identification of P2P Traffic Using Application Signatures," Proc. 13th Int. Conf. World Wide Web, 2004, pp. 512–521. 10M.S. Kim, Y.J. Won, and J.W.K. Hong, "Application-Level Traffic Monitoring and an Analysis on IP Networks," ETRI J., Vol. 27, no. 1, 2005, pp. 22–42. 11J. Erman, M. Arlitt, and A. Mahanti, "Internet Traffic Classification Using Clustering Algorithms," Proc. ACM SIGCOMM Workshop Mining Network Data, 2006, pp. 281–286. 12T. Karagiannis et al., "Transport Layer Identification of P2P Traffic," Proc. 4th ACM SIGCOMM Conf. Internet Measurement, 2004, pp. 121–134. 13A. Madhukar and C. Williamson, "A Longitudinal Study of P2P Traffic Classification," Proc.14th IEEE Int. Symp. Modeling, Analysis, and Simulation, Sept. 2006, pp. 179–188. 14T. Karagiannis, K. Papagiannaki, and M. Faloutsos, "BLINC: Multilevel Traffic Classification in the Dark," Proc. ACM SIGCOMM, Aug. 2005, pp. 229–240. 15A.W. Moore and D. Zuev, "Internet Traffic Classification Using Bayesian Analysis Techniques," Proc. SIGMETRICS, June 2005, pp. 50–60. 16A.W. Moore, " Discriminators for Use in Flow-Based Classification," Technical Report, Intel Research, Cambridge, 2005. 17M.S. Borella, "Source Models of Network Game Traffic," Computer Commun., Vol. 23, no. 4, Feb. 2000, pp. 403–410. 18J. Färber, "Network Game Traffic Modelling," Proc. 1st Workshop Network and System Support for Games, Bruanschweig, Germany, 2002, pp. 53–57. 19T. Henderson and S. Bhatti, "Modeling User Behaviour in Networked Games," Proc. 9th ACM Int. Conf. Multimedia, 2001, pp. 212–220. 20T. Lang, P. Branch, and G. Armitage, "A Synthetic Traffic Model for Quake3," Proc. ACM SIGCHI Int. Conf. Advances in Computer Entertainment Technol., Singapore, June 2004. 21W.C. Feng, F. Chang, and J. Walpole, "A Traffic Characterization of Popular On-line Games," IEEE/ACM Trans. Networking, Vol. 13, no. 3, 2005, pp. 488–500. 22T. Henderson and S. Bhatti, "Networked Games: A QoS-Sensitive Application for QoS-Insensitive Users?" Proc. ACM SIGCOMM Workshop on Revisiting IP QoS: What Have We Learned, Why Do We Care? 2003, pp. 141–147. 23A. Dainotti, A. Pescapé, and G. Ventre, "A Packet-Level Traffic Model of Starcraft," Proc. HOT-P2P 2nd Int. Workshop Hot Topics in Peer-to-Peer Systems, San Diego, USA, 2005, pp. 33–42. 24K.T. Chen, P. Huang, and C.L. Lei, "Game Traffic Analysis: An MMORPG Perspective," Computer Networks, Vol. 50, no. 16, 2006, pp. 3002–3023. 25J. Kim et al., "Traffic Characteristics of a Massively Multi-player Online Role Playing Game," Proc. NetGames, Oct. 2005, pp. 1–8. 26 Internet Assigned Numbers Authority (IANA) port number list. http://www.iana.org/assignments/port-numbers. 27J. But et al., "Evaluating Machine Learning Methods for Online Game Traffic Identification," Proc. 5th ACM SIGCOMM Workshop on Network and System Support for Games, Technical Report 060410C, CAIA, Apr. 2006. 28D.J. Parish et al., "Using Packet Size Distributions to Identify Real-Time Networked Applications," IEE Commun., Vol. 150, Aug. 2003, pp. 221–227. 29K. Tsutomu et al., "Traffic Identification for Dependable VoIP," NEC Technical J., Vol. 1, no. 3, 2006, pp. 17–20. 30M. Crotti et al., "Traffic Classification through Simple Statistical Fingerprinting," ACM SIGCOMM Computer Commun. Review, Vol. 37, no. 1, Jan. 2007, pp. 5–16. 31N. Williams, S. Zander, and G. Armitage, "A Preliminary Performance Comparison of Five Machine Learning Algorithms for Practical IP Traffic Flow Classification," ACM SIGCOMM Computer Commun. Review, Vol. 36, no. 5, Oct. 2006, pp. 5–16. 32 Gundam-Online (GO). http://gundam.netmarble.net/. 33 KartRider. http://kart.nexon.com/. 34 Stracraft. http://www.blizzard.co.kr/starcraft/. 35 Sudden Attack (SA). http://suddenattack.netmarble.net/. 36 World of Warcraft (WoW). http://www.worldofwarcraft.com/. 37 Dungeon and Fighter (D&F). http://df.hangame.com/. 38Maple Story (M.S). http://maplestory.nexon.net/. 39 Lineage II. http://www.lineage2.co.kr/. 40L.J. Gleser and D.S. Moore, "The Effect of Dependence on Chi-Squared and Empiric Distribution Tests of Fit," Annals of Statistics, Vol. 11, no. 4, 1983, pp. 1100–1108. 41N. Williams, S. Zander, and G. Armitage, "Evaluating Machine Learning Algorithms for Automated Network Application Identification," Technical Report 060401B, CAIA, Swinburne Univ., Apr. 2006. 42M. Kantardzic, Data Mining: Concepts, Methods, and Algorithms, Wiley-IEEE Press, 2003. 43 Perl programming language. http://www.perl.org/. Citing Literature Volume32, Issue1February 2010Pages 22-32 ReferencesRelatedInformation