A Method on Multimedia Service Traffic Monitoring and Analysis

  • Hun-Jeong Kang
  • Myung-Sup Kim
  • James Won-Ki Hong
Part of the Lecture Notes in Computer Science book series (LNCS, volume 2867)


The use of multimedia service applications is growing rapidly on the Internet. These applications are generating a huge volume of network traffic, which has a great impact on network performance and planning. For various purposes, obtaining information on multimedia service traffic is important. However, traditional analysis methods based on well-known ports cannot be used to analyze such traffic. Because the majority of multimedia service applications use dynamically allocated port numbers, the traditional methods misidentify multimedia service traffic as unknown traffic. This paper presents a method for monitoring and analyzing multimedia service traffic. Our method detects transport protocol and port numbers for dynamically created sessions during a control session. We then use such information to analyze traffic generated by the most popular multimedia service applications, namely Windows Media, RealMedia, Quicktime, SIP and H.323. We also present a system architecture that uses our method to monitor and analyze multimedia service traffic.


Session Initiation Protocol Control Packet Multimedia Service Transport Protocol Port Number 
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.


  1. 1.
    Internet Assigned Numbers Authority,
  2. 2.
    Hong, J.W., Kwon, S.-S., Kim, J.-Y.: WebTrafMon: Webbased Internet/Intranet Network Traffic Monitoring and Analysis System. Computer Communications 22(14), 1333–1342 (1999)CrossRefGoogle Scholar
  3. 3.
    van der Merwe, J., et al.: mmdump - A Tool for Monitoring Internet Multimedia Traffic. ACM Computer Communication Review 30(4) (October 2000)Google Scholar
  4. 4.
  5. 5.
    Real Networks, Real Media Technology,
  6. 6.
  7. 7.
    Handley, M., Schulzrinne, H., Schooler, E., Rosenberg, J.: SIP: Session Initiation Protocol. RFC 2543 (March 1999)Google Scholar
  8. 8.
    ITU-T, Recommendation H.323: Visual Telephone Systems and Equipment for Local Area Networks Which Provide a Non-guaranteed Quality of Service (1996)Google Scholar
  9. 9.
    Schulzrinne, H., Rao, A., Lanphier, R.: Real Time Streaming Protocol (RTSP). RFC 2336 (April 1998)Google Scholar
  10. 10.
    Schulzrinne, H., Casner, S., Frederick, R., Jacobson, V.: RTP: A Transport Protocol for Real-Time Applications. RFC1889 (January 1996)Google Scholar
  11. 11.
  12. 12.
    Lifler, S.: Using Flows for Analysis and Measurement of Internet Traffic. Diploma Thesis, University of Stuttgart (1997)Google Scholar
  13. 13.
    Quittek, J., Zseby, T., Claise, B., Norsth, K.C.: IPFIX Requirements. Internet Draft,
  14. 14.
    CAIDA, Preliminary Measurement Spec for Internet Routers,
  15. 15.
    Handley, M., Jacobson, V.: SDP: Session Description Protocol. RFC 2327 (April 1998)Google Scholar
  16. 16.
    Han, S.H., Kim, M.S., Ju, H.T., Hong, J.W.: The Architecture of NGMON: A Passive Network Monitoring System. In: Feridun, M., Kropf, P.G., Babin, G. (eds.) DSOM 2002. LNCS, vol. 2506, pp. 16–27. Springer, Heidelberg (2002)CrossRefGoogle Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2003

Authors and Affiliations

  • Hun-Jeong Kang
    • 1
  • Myung-Sup Kim
    • 1
  • James Won-Ki Hong
    • 1
  1. 1.Department of Computer Science and EngineeringPOSTECHKorea

Personalised recommendations