Performance Evaluation of a Field Programmable Gate Array-based System for Detecting and Tracking Peer-to-peer Protocols on a Gigabit Ethernet Network

<p>The TRacking and Analysis for Peer-to-Peer 2 (TRAPP-2) system is developed on a Xilinx ML510 FPGA. The goals of this research are to evaluate the performance of the TRAPP-2 system as a solution to detect and track malicious packets traversing a gigabit Ethernet network. The TRAPP-2 system detects a BitTorrent Session Initiation Protocol (SIP) or Domain Name System (DNS) packet extracts the payload compares the data against a hash list and if the packet is suspicious logs the entire packet for future analysis. Results show that the TRAPP-2 system captures 95.56% of BitTorrent 20.78% of SIP INVITE 37.11% of SIP BYE and 91.89% of DNS packets of interest while under a 93.7% network utilization (937 Mbps). For another experiment the contraband hash list size is increased from 1000 to 131072000 unique items. The experiment reveals that each doubling of the hash list size results in a mean increase of approximately 16 central processing unit cycles. These results demonstrate the TRAPP-2 system's ability to detect traffic of interest under a saturated network utilization while maintaining large contraband hash lists.</p><p>This work has been selected by scholars as being culturally important and is part of the knowledge base of civilization as we know it. This work was reproduced from the original artifact and remains as true to the original work as possible. Therefore you will see the original copyright references library stamps (as most of these works have been housed in our most important libraries around the world) and other notations in the work.</p><p>This work is in the public domain in the United States of America and possibly other nations. Within the United States you may freely copy and distribute this work as no entity (individual or corporate) has a copyright on the body of the work.</p><p>As a reproduction of a historical artifact this work may contain missing or blurred pages poor pictures errant marks etc. Scholars believe and we concur that this work is important enough to be preserved reproduced and made generally available to the public. We appreciate your support of the preservation process and thank you for being an important part of keeping this knowledge alive and relevant.</p><br>