{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,21]],"date-time":"2026-02-21T19:48:03Z","timestamp":1771703283765,"version":"3.50.1"},"reference-count":15,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2009,6,30]],"date-time":"2009-06-30T00:00:00Z","timestamp":1246320000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGCOMM Comput. Commun. Rev."],"published-print":{"date-parts":[[2009,6,30]]},"abstract":"<jats:p>This paper presents a statistical analysis of the amount of information that the features of traffic flows observed at the packet-level carry, with respect to the protocol that generated them. We show that the amount of information of the majority of such features remain constant irrespective of the point of observation (Internet core vs. Internet edge) and to the capture time (year 2000\/01 vs. year 2008). We also describe a comparative analysis of how four statistical classifiers fare using the features we studied.<\/jats:p>","DOI":"10.1145\/1568613.1568616","type":"journal-article","created":{"date-parts":[[2009,7,15]],"date-time":"2009-07-15T13:51:27Z","timestamp":1247665887000},"page":"13-18","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":64,"title":["On the stability of the information carried by traffic flow features at the packet level"],"prefix":"10.1145","volume":"39","author":[{"given":"Alice","family":"Este","sequence":"first","affiliation":[{"name":"University of Brescia, Brescia, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Francesco","family":"Gringoli","sequence":"additional","affiliation":[{"name":"University of Brescia, Brescia, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Luca","family":"Salgarelli","sequence":"additional","affiliation":[{"name":"University of Brescia, Brescia, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2009,6,30]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1368436.1368445"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/1162678.1162679"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1198255.1198257"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNN.2006.883010"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/1321753.1321771"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1544012.1544023"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/MASCOTS.2007.2"},{"key":"e_1_2_1_8_1","unstructured":"L7 Filter. http:\/\/l7-filter.sourceforge.net.  L7 Filter. http:\/\/l7-filter.sourceforge.net."},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.5555\/129837"},{"key":"e_1_2_1_10_1","unstructured":"A. Webb. Statistical Pattern Recognition. Wiley 2nd edition 2002. ISBN 0-470-84514-7.  A. Webb. Statistical Pattern Recognition. Wiley 2nd edition 2002. ISBN 0-470-84514-7."},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNN.2004.828766"},{"key":"e_1_2_1_12_1","unstructured":"Tcpdump\/Libpcap. http:\/\/www.tcpdump.org.  Tcpdump\/Libpcap. http:\/\/www.tcpdump.org."},{"key":"e_1_2_1_13_1","unstructured":"Auckland VI NLANR\/PMA trace repository. http:\/\/pma.nlanr.net\/Traces\/long\/auck6.html.  Auckland VI NLANR\/PMA trace repository. http:\/\/pma.nlanr.net\/Traces\/long\/auck6.html."},{"key":"e_1_2_1_14_1","unstructured":"Waikato Internet Traffic Storage (WITS). http:\/\/www.wand.net.nz\/wits.  Waikato Internet Traffic Storage (WITS). http:\/\/www.wand.net.nz\/wits."},{"key":"e_1_2_1_15_1","unstructured":"NZIX-II NLANR\/PMA trace repository. http:\/\/pma.nlanr.net\/Traces\/long\/nzix2.html  NZIX-II NLANR\/PMA trace repository. http:\/\/pma.nlanr.net\/Traces\/long\/nzix2.html"}],"container-title":["ACM SIGCOMM Computer Communication Review"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1568613.1568616","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1568613.1568616","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:17:48Z","timestamp":1750249068000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1568613.1568616"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,6,30]]},"references-count":15,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2009,6,30]]}},"alternative-id":["10.1145\/1568613.1568616"],"URL":"https:\/\/doi.org\/10.1145\/1568613.1568616","relation":{},"ISSN":["0146-4833"],"issn-type":[{"value":"0146-4833","type":"print"}],"subject":[],"published":{"date-parts":[[2009,6,30]]},"assertion":[{"value":"2009-06-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}