TCP与UDP网络流量对比分析研究  

Comparative analysis on TCP and UDP network traffic

作　　者：张艺濒[1,2,3] 张志斌[1,3] 赵咏[1,2,3] 郭莉[1,3] 

机构地区：[1]中国科学院计算技术研究所,北京100190 [2]中国科学院研究生院,北京100049 [3]中国科学院信息内容安全技术国家工程实验室,北京100049

出　　处：《计算机应用研究》2010年第6期2192-2197,共6页Application Research of Computers

基　　金：国家"973"计划资助项目(2007CB311100)

摘　　要：网络带宽不断增长,越来越多的音/视频、在线游戏等应用成为网络空间的主体。基于实时性考虑,这些新兴应用协议多选择UDP作为其底层的传输协议,使得UDP流量呈上升趋势,而以往的流量测量工作一般基于TCP进行,忽略了UDP协议。对国内某骨干网流量进行了连续12h的在线测量,在传输层和应用层分别对TCP和UDP及其应用层协议的流的总数、长度分布、持续时间分布、流的速度分布等进行了详尽的分析,并对TCP和UDP的应用层协议流的大小、长短、快慢作了详细的分类。为网络流的分类技术、网络行为发现、网络设计等提供了数据支持。With the increase of network bandwidth, more and more new applications like audio, video and online games become the major force in network traffic. Based on real-time considerations, these new applications mostly used UDP as transport layer protocol, which made UDP traffic increase. While previous traffic measurements were generally based on TCP and ignore UDP protocol. This paper made a continuous 12-hour on-line measurement on a backbone environment. Firstly, it did a detailed analysis on TCP and UDP in transport and application layer, including total number of the flow, length distribution, duration distribution, and flow rate distribution. Secondly, gave a detailed classification on application layer protocols according to flow size, length, and speed. Our analysis and conclusions can present a data support for other studies as the traffic classification, network behavior analysis, and the network design etc.

关 键 词：TCP UDP 协议特征 流量分类 端口 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术]