Scalable Network Monitoring in High Speed Networks

Network monitoring serves as the basis for a wide scope of network, engineering and management operations. Precise network monitoring involves inspecting every packet traversing in a network. However, this is not feasible with future high-speed networks,

  • PDF / 4,060,539 Bytes
  • 161 Pages / 439 x 666 pts Page_size
  • 92 Downloads / 196 Views

DOWNLOAD

REPORT


Baek-Young Choi • Zhi-Li Zhang David Hung-Chang Du

Scalable Network Monitoring in High Speed Networks

123

Baek-Young Choi Department of Computer Science and Electrical Engineering University of Missouri – Kansas City 546 Flarsheim Hall Rockhill Rd. 5110 64110 Kansas City MO USA [email protected]

Zhi-Li Zhang Department of Computer Science and Engineering University of Minnesota 4-192 EE/CS Building Union Street SE 200 55416 Minneapolis MN USA

David Hung-Chang Du Department of Computer Science and Engineering University of Minnesota 4-192 EE/CS Building Union Street SE 200 55455 Minneapolis MN USA

ISBN 978-1-4614-0118-6 e-ISBN 978-1-4614-0119-3 DOI 10.1007/978-1-4614-0119-3 Springer New York Dordrecht Heidelberg London Library of Congress Control Number: 2011930857 c Springer Science+Business Media, LLC 2011  All rights reserved. This work may not be translated or copied in whole or in part without the written permission of the publisher (Springer Science+Business Media, LLC, 233 Spring Street, New York, NY 10013, USA), except for brief excerpts in connection with reviews or scholarly analysis. Use in connection with any form of information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed is forbidden. The use in this publication of trade names, trademarks, service marks, and similar terms, even if they are not identified as such, is not to be taken as an expression of opinion as to whether or not they are subject to proprietary rights. Printed on acid-free paper Springer is part of Springer Science+Business Media (www.springer.com)

Dedicated to our families

Preface

Network monitoring serves as basis for a wide scope of network operations, engineering and management. Precise network monitoring involves inspecting every packet traversing in a network. However, this is infeasible in today’s and future high-speed networks, due to significant overheads of processing, storing, and transferring measured data. Therefore, scalable network monitoring techniques are in urgent need. This book addresses the scalability issue of network monitoring from both traffic and performance perspectives. On scalable traffic monitoring, we present sampling techniques for total load and flow measurement. In order to develop accurate and efficient measurement schemes, we study various aspects of traffic characteristics and their impacts on packet sampling. We find that static sampling does not adjust itself to dynamic traffic conditions, yielding often erroneous estimations or excessive oversampling. We develop the adaptive random sampling technique for total load estimation, that determines the sampling probability adaptively according to traffic condition. We then enhance the adaptive sampling technique to measure traffic in flow level. Flow measurement is a particularly challenging problem, since flows arrive at random times, stay for random durations, and their rates fluctuate over time. Those characteristics make it hard to decide a samp