TCP与UDP网络流量对比分析研究*

网络带宽不断增长，越来越多的音/视频、在线游戏等应用成为网络空间的主体。基于实时性考虑，这些新兴应用协议多选择UDP作为其底层的传输协议，使得UDP流量呈上升趋势，而以往的流量测量工作一般基于TCP进行，忽略了UDP协议。对国内某骨干网流量进行了连续12 h的在线测量，在传输层和应用层分别对TCP和UDP及其应用层协议的流的总数、长度分布、持续时间分布、流的速度分布等进行了详尽的分析,并对TCP和UDP的应用层协议流的大小、长短、快慢作了详细的分类。为网络流的分类技术、网络行为发现、网络设计等提供了数据支持。

Comparative analysis on TCP and UDP network traffic

With the increase of network bandwidth, more and more new applications like audio, video and online games become the major force in network traffic. Based on real-time considerations, these new applications mostly used UDP as transport layer protocol, which made UDP traffic increase. While previous traffic measurements were generally based on TCP and ignore UDP protocol. This paper made a continuous 12-hour on-line measurement on a backbone environment. Firstly, it did a detailed analysis on TCP and UDP in transport and application layer, including total number of the flow, length distribution, duration distribution, and flow rate distribution. Secondly, gave a detailed classification on application layer protocols according to flow size, length, and speed. Our analysis and conclusions can present a data support for other studies as the traffic classification, network behavior analysis, and the network design etc.