Quantifying the accuracy of the ground truth associated with Internet traffic traces

Ground truth information for Internet traffic traces is often derived by means of port analysis and payload inspection (Deep Packet Inspection – DPI). In this paper we analyze the errors that DPI and port analysis commit when assigning protocol labels to traffic traces. We compare the ground truth p...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Veröffentlicht in:Computer networks (Amsterdam, Netherlands : 1999) Netherlands : 1999), 2011-04, Vol.55 (5), p.1158-1167
Hauptverfasser: Dusi, Maurizio, Gringoli, Francesco, Salgarelli, Luca
Format: Artikel
Sprache:eng
Schlagworte:
Online-Zugang:Volltext
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
container_end_page 1167
container_issue 5
container_start_page 1158
container_title Computer networks (Amsterdam, Netherlands : 1999)
container_volume 55
creator Dusi, Maurizio
Gringoli, Francesco
Salgarelli, Luca
description Ground truth information for Internet traffic traces is often derived by means of port analysis and payload inspection (Deep Packet Inspection – DPI). In this paper we analyze the errors that DPI and port analysis commit when assigning protocol labels to traffic traces. We compare the ground truth provided by these approaches with that derived by gt, a tool that we developed, which provides error-free ground truth at the application level by construction. Experimental results demonstrate that, depending on the protocols composing a trace, ground truth information from port analysis and DPI can be incorrect for up to 91% and 26% of the labeled bytes, respectively.
doi_str_mv 10.1016/j.comnet.2010.11.006
format Article
fullrecord <record><control><sourceid>proquest_cross</sourceid><recordid>TN_cdi_proquest_miscellaneous_875711906</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><els_id>S1389128610003579</els_id><sourcerecordid>875711906</sourcerecordid><originalsourceid>FETCH-LOGICAL-c427t-60026036622dea46a4b8c04c252f8eef5cc48a86f879f71edc6c8e42150da2623</originalsourceid><addsrcrecordid>eNqFkU1LJDEQhptlhXXH_Qd7aBYWTz1W0ukkfRFE1g8QRNBzyFZXNMNMoklamX-_3Y7swYOeKlV58lZV3qr6yWDJgMmj1RLjJlBZcphLbAkgv1T7TCveKJD91-nc6r5hXMtv1fecVwAgBNf71e3NaEPxbuvDfV0eqLaIY7K4raN7ze9THMNQlzSWh9rmHNHbQkP94qf8MhRKU-Pp2jrncY5I-aDac3ad6cdbXFR3Z39uTy-aq-vzy9OTqwYFV6WRAFxCKyXnA1khrfirEQTyjjtN5DpEoa2WTqveKUYDStQkOOtgsFzydlEd7nQfU3waKRez8RlpvbaB4piNVp1irAf5OSl7DUxxPZG_3pGrOKYwrWF0J0XbKzVDYgdhijkncuYx-Y1NW8PAzJaYldlZYmZLDGMGXqf4_aZtM9q1Szagz__f8rYXfSvYxB3vOJo-79lTMhk9BaTBJ8Jihug_bvQP53OjGQ</addsrcrecordid><sourcetype>Aggregation Database</sourcetype><iscdi>true</iscdi><recordtype>article</recordtype><pqid>856439778</pqid></control><display><type>article</type><title>Quantifying the accuracy of the ground truth associated with Internet traffic traces</title><source>Elsevier ScienceDirect Journals</source><creator>Dusi, Maurizio ; Gringoli, Francesco ; Salgarelli, Luca</creator><creatorcontrib>Dusi, Maurizio ; Gringoli, Francesco ; Salgarelli, Luca</creatorcontrib><description>Ground truth information for Internet traffic traces is often derived by means of port analysis and payload inspection (Deep Packet Inspection – DPI). In this paper we analyze the errors that DPI and port analysis commit when assigning protocol labels to traffic traces. We compare the ground truth provided by these approaches with that derived by gt, a tool that we developed, which provides error-free ground truth at the application level by construction. Experimental results demonstrate that, depending on the protocols composing a trace, ground truth information from port analysis and DPI can be incorrect for up to 91% and 26% of the labeled bytes, respectively.</description><identifier>ISSN: 1389-1286</identifier><identifier>EISSN: 1872-7069</identifier><identifier>DOI: 10.1016/j.comnet.2010.11.006</identifier><identifier>CODEN: CNETDP</identifier><language>eng</language><publisher>Kidlington: Elsevier B.V</publisher><subject>Applied sciences ; C (programming language) ; Characterization ; Composing ; Evaluation ; Exact sciences and technology ; Ground truth ; Inspection ; Interconnected networks ; Internet ; Internet Protocol ; Measurement ; Miscellaneous ; Networks and services in france and abroad ; Packet switched networks ; Ports ; Studies ; Telecommunications ; Telecommunications and information theory ; Teleprocessing networks. Isdn ; Traffic ; Traffic engineering ; Traffic flow</subject><ispartof>Computer networks (Amsterdam, Netherlands : 1999), 2011-04, Vol.55 (5), p.1158-1167</ispartof><rights>2010 Elsevier B.V.</rights><rights>2015 INIST-CNRS</rights><rights>Copyright Elsevier Sequoia S.A. Apr 1, 2011</rights><lds50>peer_reviewed</lds50><woscitedreferencessubscribed>false</woscitedreferencessubscribed><citedby>FETCH-LOGICAL-c427t-60026036622dea46a4b8c04c252f8eef5cc48a86f879f71edc6c8e42150da2623</citedby><cites>FETCH-LOGICAL-c427t-60026036622dea46a4b8c04c252f8eef5cc48a86f879f71edc6c8e42150da2623</cites></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://www.sciencedirect.com/science/article/pii/S1389128610003579$$EHTML$$P50$$Gelsevier$$H</linktohtml><link.rule.ids>314,776,780,3537,27901,27902,65306</link.rule.ids><backlink>$$Uhttp://pascal-francis.inist.fr/vibad/index.php?action=getRecordDetail&amp;idt=23949341$$DView record in Pascal Francis$$Hfree_for_read</backlink></links><search><creatorcontrib>Dusi, Maurizio</creatorcontrib><creatorcontrib>Gringoli, Francesco</creatorcontrib><creatorcontrib>Salgarelli, Luca</creatorcontrib><title>Quantifying the accuracy of the ground truth associated with Internet traffic traces</title><title>Computer networks (Amsterdam, Netherlands : 1999)</title><description>Ground truth information for Internet traffic traces is often derived by means of port analysis and payload inspection (Deep Packet Inspection – DPI). In this paper we analyze the errors that DPI and port analysis commit when assigning protocol labels to traffic traces. We compare the ground truth provided by these approaches with that derived by gt, a tool that we developed, which provides error-free ground truth at the application level by construction. Experimental results demonstrate that, depending on the protocols composing a trace, ground truth information from port analysis and DPI can be incorrect for up to 91% and 26% of the labeled bytes, respectively.</description><subject>Applied sciences</subject><subject>C (programming language)</subject><subject>Characterization</subject><subject>Composing</subject><subject>Evaluation</subject><subject>Exact sciences and technology</subject><subject>Ground truth</subject><subject>Inspection</subject><subject>Interconnected networks</subject><subject>Internet</subject><subject>Internet Protocol</subject><subject>Measurement</subject><subject>Miscellaneous</subject><subject>Networks and services in france and abroad</subject><subject>Packet switched networks</subject><subject>Ports</subject><subject>Studies</subject><subject>Telecommunications</subject><subject>Telecommunications and information theory</subject><subject>Teleprocessing networks. Isdn</subject><subject>Traffic</subject><subject>Traffic engineering</subject><subject>Traffic flow</subject><issn>1389-1286</issn><issn>1872-7069</issn><fulltext>true</fulltext><rsrctype>article</rsrctype><creationdate>2011</creationdate><recordtype>article</recordtype><recordid>eNqFkU1LJDEQhptlhXXH_Qd7aBYWTz1W0ukkfRFE1g8QRNBzyFZXNMNMoklamX-_3Y7swYOeKlV58lZV3qr6yWDJgMmj1RLjJlBZcphLbAkgv1T7TCveKJD91-nc6r5hXMtv1fecVwAgBNf71e3NaEPxbuvDfV0eqLaIY7K4raN7ze9THMNQlzSWh9rmHNHbQkP94qf8MhRKU-Pp2jrncY5I-aDac3ad6cdbXFR3Z39uTy-aq-vzy9OTqwYFV6WRAFxCKyXnA1khrfirEQTyjjtN5DpEoa2WTqveKUYDStQkOOtgsFzydlEd7nQfU3waKRez8RlpvbaB4piNVp1irAf5OSl7DUxxPZG_3pGrOKYwrWF0J0XbKzVDYgdhijkncuYx-Y1NW8PAzJaYldlZYmZLDGMGXqf4_aZtM9q1Szagz__f8rYXfSvYxB3vOJo-79lTMhk9BaTBJ8Jihug_bvQP53OjGQ</recordid><startdate>20110401</startdate><enddate>20110401</enddate><creator>Dusi, Maurizio</creator><creator>Gringoli, Francesco</creator><creator>Salgarelli, Luca</creator><general>Elsevier B.V</general><general>Elsevier</general><general>Elsevier Sequoia S.A</general><scope>IQODW</scope><scope>AAYXX</scope><scope>CITATION</scope><scope>7SC</scope><scope>8FD</scope><scope>E3H</scope><scope>F2A</scope><scope>JQ2</scope><scope>L7M</scope><scope>L~C</scope><scope>L~D</scope></search><sort><creationdate>20110401</creationdate><title>Quantifying the accuracy of the ground truth associated with Internet traffic traces</title><author>Dusi, Maurizio ; Gringoli, Francesco ; Salgarelli, Luca</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-LOGICAL-c427t-60026036622dea46a4b8c04c252f8eef5cc48a86f879f71edc6c8e42150da2623</frbrgroupid><rsrctype>articles</rsrctype><prefilter>articles</prefilter><language>eng</language><creationdate>2011</creationdate><topic>Applied sciences</topic><topic>C (programming language)</topic><topic>Characterization</topic><topic>Composing</topic><topic>Evaluation</topic><topic>Exact sciences and technology</topic><topic>Ground truth</topic><topic>Inspection</topic><topic>Interconnected networks</topic><topic>Internet</topic><topic>Internet Protocol</topic><topic>Measurement</topic><topic>Miscellaneous</topic><topic>Networks and services in france and abroad</topic><topic>Packet switched networks</topic><topic>Ports</topic><topic>Studies</topic><topic>Telecommunications</topic><topic>Telecommunications and information theory</topic><topic>Teleprocessing networks. Isdn</topic><topic>Traffic</topic><topic>Traffic engineering</topic><topic>Traffic flow</topic><toplevel>peer_reviewed</toplevel><toplevel>online_resources</toplevel><creatorcontrib>Dusi, Maurizio</creatorcontrib><creatorcontrib>Gringoli, Francesco</creatorcontrib><creatorcontrib>Salgarelli, Luca</creatorcontrib><collection>Pascal-Francis</collection><collection>CrossRef</collection><collection>Computer and Information Systems Abstracts</collection><collection>Technology Research Database</collection><collection>Library &amp; Information Sciences Abstracts (LISA)</collection><collection>Library &amp; Information Science Abstracts (LISA)</collection><collection>ProQuest Computer Science Collection</collection><collection>Advanced Technologies Database with Aerospace</collection><collection>Computer and Information Systems Abstracts – Academic</collection><collection>Computer and Information Systems Abstracts Professional</collection><jtitle>Computer networks (Amsterdam, Netherlands : 1999)</jtitle></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext</fulltext></delivery><addata><au>Dusi, Maurizio</au><au>Gringoli, Francesco</au><au>Salgarelli, Luca</au><format>journal</format><genre>article</genre><ristype>JOUR</ristype><atitle>Quantifying the accuracy of the ground truth associated with Internet traffic traces</atitle><jtitle>Computer networks (Amsterdam, Netherlands : 1999)</jtitle><date>2011-04-01</date><risdate>2011</risdate><volume>55</volume><issue>5</issue><spage>1158</spage><epage>1167</epage><pages>1158-1167</pages><issn>1389-1286</issn><eissn>1872-7069</eissn><coden>CNETDP</coden><abstract>Ground truth information for Internet traffic traces is often derived by means of port analysis and payload inspection (Deep Packet Inspection – DPI). In this paper we analyze the errors that DPI and port analysis commit when assigning protocol labels to traffic traces. We compare the ground truth provided by these approaches with that derived by gt, a tool that we developed, which provides error-free ground truth at the application level by construction. Experimental results demonstrate that, depending on the protocols composing a trace, ground truth information from port analysis and DPI can be incorrect for up to 91% and 26% of the labeled bytes, respectively.</abstract><cop>Kidlington</cop><pub>Elsevier B.V</pub><doi>10.1016/j.comnet.2010.11.006</doi><tpages>10</tpages></addata></record>
fulltext fulltext
identifier ISSN: 1389-1286
ispartof Computer networks (Amsterdam, Netherlands : 1999), 2011-04, Vol.55 (5), p.1158-1167
issn 1389-1286
1872-7069
language eng
recordid cdi_proquest_miscellaneous_875711906
source Elsevier ScienceDirect Journals
subjects Applied sciences
C (programming language)
Characterization
Composing
Evaluation
Exact sciences and technology
Ground truth
Inspection
Interconnected networks
Internet
Internet Protocol
Measurement
Miscellaneous
Networks and services in france and abroad
Packet switched networks
Ports
Studies
Telecommunications
Telecommunications and information theory
Teleprocessing networks. Isdn
Traffic
Traffic engineering
Traffic flow
title Quantifying the accuracy of the ground truth associated with Internet traffic traces
url https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2025-02-05T08%3A15%3A33IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-proquest_cross&rft_val_fmt=info:ofi/fmt:kev:mtx:journal&rft.genre=article&rft.atitle=Quantifying%20the%20accuracy%20of%20the%20ground%20truth%20associated%20with%20Internet%20traffic%20traces&rft.jtitle=Computer%20networks%20(Amsterdam,%20Netherlands%20:%201999)&rft.au=Dusi,%20Maurizio&rft.date=2011-04-01&rft.volume=55&rft.issue=5&rft.spage=1158&rft.epage=1167&rft.pages=1158-1167&rft.issn=1389-1286&rft.eissn=1872-7069&rft.coden=CNETDP&rft_id=info:doi/10.1016/j.comnet.2010.11.006&rft_dat=%3Cproquest_cross%3E875711906%3C/proquest_cross%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_pqid=856439778&rft_id=info:pmid/&rft_els_id=S1389128610003579&rfr_iscdi=true