Hendrik Schulze, Klaus Mochalski For the third year in a row, after 2006 and 2007, ipoque has conducted a comprehensive study measuring and analyzing Internet traffic in eight regions of the world. The study includes statistical data about popularity and user behavior for all common network protocols. This covers most applications used in today’s Internet such as Webbrowsing, media streaming, P2P file sharing, one-click file hosting, instant messaging, Internet telephony and online games. BitTorrent and eDonkey downloads have been analyzed to classify the transfered files according to their content type. Some of the key findings are: P2P still produces most Internet traffic worldwide although its proportion has declined across all monitored regions – loosingusers to file hosting and media streaming; regional variations in application usage are very prominent; and Web traffic has made its comeback due to the popularity of file hosting, social networking sites and the growing media richness of Web pages. Introduction
This study uses the same methodology as the 2007 Internet Study1 to classify network traffic according to protocol and protocol class.Several of ipoque’s ISP and university customers agreed to provide anonymized traffic statistics collected by PRX Traffic Managers installed in their networks. Protocols and applications are detected with a combination of layer-7 deep packet inspection (DPI) and behavioral traffic analysis. All classified network flows are then accounted per subscriber providing the raw data for this study. Allcomparisons and trend analyses, if not noted otherwise, refer to the 2007 study. It is important to note that the results are not statistically representative. The monitoring sites where picked based on accessibility and may not be typical for their region. For instance, we could have picked the only cable ISP in a country, where all other ISPs only offer DSL access. Protocol class definition as used inthis study
Protocol Class P2P Web Streaming VoIP IM Tunnel Standard Gaming Unknown Deﬁnition P2P ﬁle sharing Web pages incl. ﬁle hosting, excl. streaming Voice over IP – Internet telephony Instant messaging Examples Ares, BitTorrent, eDonkey, Gnutella all Web sites, RapidShare, Megaupload
What Is New? What Is Different?
Key facts • 8 regions: Northern Africa, Southern Africa, South America,Middle East, Eastern Europe, Southern Europe, Southwestern Europe, Germany • 1.3 petabytes of user traffic monitored • 1.1 million users represented • At 8 ISPs and 3 universities • DPI and behavioral analysis of about 100 protocols • Packet size analysis for all protocols The regional coverage has been extended to include eight regions of the world. Last year’s study covered the five regionsAustralia, Eastern Europe, Germany, the Middle East and Southern Europe. The additional regions are Northern and Southern Africa, South America and Southern Europe. The countries covered under the Southern Europe region last year are now Southwestern Europe. We decided to distinguish between these two regions because the new countries added in this study showed different results that would havevanished in an aggregation. Just as in previous years, regional differences are significant. Measurement sites
Region Northern Africa Southern Africa South America Middle East Eastern Europe Southern Europe Southwestern Europe Germany Monitored Users 250.000 50.000 50.000 200.000 100.000 20.000 80.000 100.000 Evaluated Trafﬁc (TB) 70 ISP 83 ISP, satellite uplink 38 ISP 60 ISP 200 ISP 170 ISP 100 ISP560 1 ISP, 3 universities Network Type
Audio and video streaming Flash, QuickTime, Real Media, RTSP IAX, H.323, MGCP, SIP, Skinny, Skype IRC, Gadu-Gadu, XMPP (Jabber, Google Talk), MSN, Oscar, Paltalk, Yahoo
Encrypted and unencrypted GRE, IPsec, OpenVPN, SSL, Tor tunneling protocols Legacy Internet protocols (without Web) Multiplayer and network games Non-classiﬁed trafﬁc BGP, DNS, FTP,...