Typically Skype is detected as follows:
• The underlying protocol must be eDonkey. This can be detected by dissecting the initial session payload as described in [karagiannis], and partially relying on the default port being used. Patterns searching for Skype detection has been implemented using the popular PCRE [pcre] library. This library that allows patterns to be efficiently searched into into a data buffer, has been used to search for Skype pattern into the packet payload. The protocol pattern definition has been borrowed by the popular l7-filter [l7-filter] tool that includes several patters not limited only to P2P/ VoIP protocols. Thanks to this solution, it is possible to detect not only Skype in general, but also the conversation type (skype2skype or skype-in/out call).
• As Skype traffic looks similar to the original eDonkey traffic, it is necessary to further characterize the traffic in order to distinguish eDonkey from Skype. As protocol payload is encrypted, the only choice left is the analysis of traffic conversations. In particular the main differences between a P2P and Skype conversation are:
• During a Skype conversation, traffic is bidirectional, packet frequency is high (in general around 64 packets/sec regardless of peers speaking or not) with limited jitter, packet size is limited (usually below 250 bytes).
• A eDonkey P2P session instead is mostly unidirectional (from the source of data to the host where data is directed), packet rate is not constant and packet size is much larger.
In a nutshell the only thing that a monitoring application can do with respect to Skype traffic, is to provide evidence of calls without furnishing any other information such the nickname of the people who held the conversation. For this reason Skype detection has been implemented only inside ntop and not on nProbe as there are almost no metrics to export while analyzing Skype traffic.
Source: Luca Deri (ntop.org)
]]>REGULATORY CHALLENGE
• Getting the courage to regulate creatively and around the traditional formats
• Encouraging private-municipality partnerships
• Exempting certain regions out of restrictive regulation
• Balancing true consumer needs with investment realities
REGULATORY CHALLENGE AND OPPORTUNITY
Consider opening telecoms market to VoIP to licensed competitors at least in urban environments and require them to contribute to universal service fund. Good concept with political, technical and economic issues.
- Balancing of interests to access charge regulation, should broadband be outside the regulatory realm?
- Regulatory creativity: partnerships between private enterprise and municipalities; “regions with disability” regulation, etc.
- Provision of Emergency Services: 911 and E911
Source: Greenberg Trauring
]]>Best-effort networks leverage Interior Gateway Protocol (IGP) technologies such as Open Shortest Path First (OSPF) and Intermediate System to Intermediate System (IS-IS) to determine paths for routing packets between hosts. IGP protocols use a Shortest Path First (SPF) algorithm to build routing tables. The routing engine references these routing tables at each router hop traversed by the packets.
Architects for these networks provide QoS by over-provisioning the links and routers so that network congestion does not introduce unwanted levels of latency, jitter, and packet loss. Overprovisioning a network would appear to be a simple way to provide the necessary level of QoS. However, while this approach requires a significant amount of added bandwidth, it still cannot guarantee service levels in an operational environment. Historically, to provide toll-grade services during predictable periods of network usage, service providers must over-provision bandwidth resources by a factor of between 10:1 and 20:1.
Best-effort networks are not ideal in dealing with temporary or permanent outages. IGP will advertise the outage and initiate a route table reconstruction based on the modified topology. This process is called route re-convergence, and if not designed carefully or optimized, can take seconds to stabilize. Web browsing or e-mail users do not typically notice these seconds. However, route re-convergence can be detrimental to VoIP users in the middle of a conversation, as it impacts both latency and jitter.
Source: Juniper Networks, Inc. White Paper