Measurement and diagnosis of address misconfigured P2P traffic

Zhichun Li*, Anup Goyal, Yan Chen, Aleksandar Kuzmanovic

*Corresponding author for this work

Research output: Contribution to journalArticlepeer-review

2 Scopus citations


Through measurement study, we discover an interesting phenomenon, P2P address misconfiguration, in which a large number of peers send P2P file downloading requests to a ArandomA target on the Internet. Through measuring three large datasets spanning four years and across five different /8 networks, we find address-misconfigured P2P traffic on average contributes 38.9 percent of Internet background radiation, increasing by more than 100 percent every year. To detect and diagnose such unwanted traffic, we design the P2PScope, a measurement tool. After analyzing about 2 Tbytes of data and tracking millions of peers, we found that in all the P2P systems, address misconfiguration is caused by resource mapping contamination: the sources returned for a given file ID through P2P indexing are not valid. Different P2P systems have different reasons for such contamination. For eMule, we find that the root cause is mainly a network byte-order problem in the eMule Source Exchange protocol. For BitTorrent misconfiguration, one reason is that anti-P2P companies actively inject bogus peers into the P2P system. Another reason is that the KTorrent implementation has a byte-order problem.

Original languageEnglish (US)
Article number5772057
Pages (from-to)22-28
Number of pages7
JournalIEEE Network
Issue number3
StatePublished - May 2011

ASJC Scopus subject areas

  • Software
  • Information Systems
  • Hardware and Architecture
  • Computer Networks and Communications


Dive into the research topics of 'Measurement and diagnosis of address misconfigured P2P traffic'. Together they form a unique fingerprint.

Cite this