Can I read Fast Monitoring of Traffic Subpopulations on EtoBox?

Fast Monitoring of Traffic Subpopulations by Anirudh Ramachandran; Srinivasan Seetharaman; Nick Feamster; Vijay Vazirani is a scholarly article available to read on EtoBox.

What is Fast Monitoring of Traffic Subpopulations about?

Network accounting, forensics, security, and performance monitoring applications often need to examine detailed traces from subsets of flows ("subpopulations"), where the application requires flexibility in specifying the subpopulation (e.g., to detect a portscan, the application must observe many packets between a source and a destination with one packet to each port). Unfortunately, the dynamism and volume of network traffic on many high-speed links requires traffic sampling, which adversely affects subpopulation monitoring: because many subpopulations of interest to operators are low-volume flows, conventional sampling schemes (e.g., uniform random sampling) can miss much of the subpopulation's traffic. Today's routers and network devices provide scant support for monitoring specific traffic subpopulations. This paper presents the design, implementation, and evaluation of FlexSample, a traffic monitoring framework that dynamically extracts traffic from subpopulations that operators define using conditions on packet header fields. FlexSample uses a fast, flexible counter array to provide rough estimates of packets' membership in respective subpopulations. Based on these coarse es

Author

Anirudh Ramachandran; Srinivasan Seetharaman; Nick Feamster; Vijay Vazirani

Publisher

ACM

Published

2008

Language

EN