This paper describes a protocol detection using statistic information about a flow extended by packet sizes and time characteristics about inter-packet gaps. The data is processed by QT clustering algorithm which divides flows into specific groups.
This paper describes a protocol detection using statistic information about a flow extended by packet sizes and time characteristics about inter-packet gaps. The data is processed by QT clustering algorithm which divides flows into specific groups. (en)