A characterization of high-performance network monitoring systems and workloads

2007 IEEE Workshop on High Performance Switching and Routing, HPSR

Volumn , Issue , 2007, Pages 310-317

  Bunga, Siddhartha ^a   Wolf, Tilman ^b  

^a CISCO SYSTEMS   (United States)

^b University of Massachusetts Amherst   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

HIGH PERFORMANCE LIQUID CHROMATOGRAPHY;

HIGH PERFORMANCE SWITCHING AND ROUTING; HIGH-PERFORMANCE NETWORKS; INTERNET INFRASTRUCTURES; MEASUREMENT SYSTEMS; NETWORK MONITORING SYSTEMS; PERFORMANCE ANALYSES; SYSTEM ARCHITECTURES; SYSTEM RESOURCES;

INDUSTRIAL MANAGEMENT;

EID: 47649122510     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HPSR.2007.4281259     Document Type: Conference Paper

References (34)

1. V. Jacobson, "Congestion avoidance and control," in Proc. of ACM SIGCOMM 88, Stanford, CA, Aug. 1988, pp. 314-329.
2. S. Floyd, "TCP and explicit congestion notification," SIGCOMM Computer Communication Review, vol. 24, no. 5, pp. 8-23, 1994.
3. D. D. Clark and D. L. Tennenhouse, "Architectural considerations for a new generation of protocols," in Proc. of ACM SIGCOMM 90, Philadelphia, PA, Sept. 1990, pp. 200-208.
4. M. S. Blumenthal and D. D. Clark, "Rethinking the design of the internet: the end-to-end arguments vs. the brave new world," ACM Transactions on Internet Technology, vol. 1, no. 1, pp. 70-109, 2001.
5. D. Clark, K. Sollins, J. Wroclawski, D. Katabi, J. Kulik, X. Yang, B. Braden, T. Faber, A. Falk, V. Pingali, M. Handley, and N. Chiappa, "New Arch: future generation internet architecture," Defense Advanced Research Project Agency, Tech. Rep., Dec. 2003.
6. D. D. Clark, "The design philosophy of the DARPA internet protocols," in Proc. of ACM SIGCOMM 88, Stanford, CA, Aug. 1988, pp. 106-114.
7. S. Floyd and V. Jacobson, "Random early detection (RED) gateways for congestion avoidance," IEEE/ACM Transactions on Networking, vol. 1, no. 4, pp. 397-413, Aug. 1993.
8. K. B. Egevang and P. Francis, "The IP network address translator (NAT)," Network Working Group, RFC 1631, May 1994.
9. J. C. Mogul, "Simple and flexible datagram access controls for UNIX-based gateways," in USENIX Conference Proceedings, Baltimore, MD, June 1989, pp. 203-221.
10. The Open Source Network Intrusion Detection System, Snort, 2004, http: //www.snort.org.
11. S. Bhattacharyya, C. Diot, J. Jetcheva, and N. Taft, "Pop-level and access-link-level traffic dynamics in a tier-1 POP," in Proc. of the First ACM SIGCOMM Internet Measurement Workshop, San Francisco, CA, Nov. 2001, pp. 39-53.
12. k. claffy, G. Miller, and T. Kevin, "The nature of the beast: Recent traffic measurements from an internet backbone," in Proc. of 1998 INET Conference, Geneva, Switzerland, June 1998.
13. K. Thompson, G. J. Miller, and R. Wilder, "Wide-area internet traffic patterns and characteristics," IEEE Network Magazine, vol. 11, no. 6, pp. 10-23, Nov. 1997.
14. C. Fraleigh, S. B. Moon, B. Lyles, C. Cotton, M. Khan, D. Moll, R. Rockell, T. Seely, and C. Diot, "Packet-level traffic measurements from the Sprint IP backbone," IEEE Network, vol. 17, no. 6, pp. 6-16, Nov. 2003.
15. K. Papagiannaki, N. Taft, and A. Lakhina, "A distributed approach to measure IP traffic matrices," in IMC '04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, Taormina, Italy, Oct. 2004, pp. 161-174.
16. A. Kumar, M. Sung, J. Xu, and J. Wang, "Data streaming algorithms for efficient and accurate estimation of flow size distribution," in Proc. of Proceedings of the Joint International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS), New York, NY, June 2004.
17. C. Estan, K. Keys, D. Moore, and G. Varghese, "Building a better NetFlow," in SIGCOMM '04: Proceedings of the 2004 conference on Applications, technologies, architectures, and protocols for computer communications, Portland, OR, 2004.
18. L. Golab, D. DeHaan, E. D. Demaine, A. López-Ortiz, and J. I. Munro, "Identifying frequent items in sliding windows over on-line packet streams," in IMC '03: Proceedings of the 3rd ACM SIGCOMM Conference on Internet Measurement, Miami Beach, FL, Oct. 2003, pp. 173-178.
19. Y. Zhang, S. Singh, S. Sen, N. Duffield, and C. Lund, "Online identification of hierarchical heavy hitters: algorithms, evaluation, and applications," in IMC '04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, Taormina, Italy, Oct. 2004, pp. 101-114.
20. Y. Gu, A. McCallum, and D. Towsley, "Detecting anomalies in network traffic using maximum entropy estimation," in Proceedings of the 5th ACM SIGCOMM Conference on Internet Measurement (IMC '05), Berkeley, CA, Oct. 2005.
21. E. D. Demaine, A. López-Ortiz, and J. I. Munro, "Frequency estimation of internet packet streams with limited space," in Proc. of the 10th Annual European Symposium on Algorithms (ESA 2002), ser. Lecture Notes in Computer Science, vol. 2461, Rome, Italy, Sept. 2002, pp. 348-360.
22. N. Hohn and D. Veitch, "Inverting sampled traffic," in IMC '03: Proceedings of the 3rd ACM SIGCOMM conference on Internet measurement, Miami Beach, FL, 2003, pp. 222-233.
23. Y. Tsang, M. Yildiz, P. Barford, and R. Nowak, "Network radar: tomography from round trip time measurements," in IMC '04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, Taormina, Italy, Oct. 2004, pp. 175-180.
24. TCPDUMP Public Repository, TCPDUMP, 2003, http://www.tcpdump.org.
25. DAG4.3E Network Monitoring Interface Card, Endace Measurement Systems, 2005, http://www.endace.com/dag4.3GE.htm.
26. Intel Second Generation Network Processor, Intel Corporation, 2005, http://www.intel.com/design/network/products/npfamily/.
27. L. Zhao, Y. Luo, L. Bhuyan, and R. Iyer, "SpliceNP: a TCP splicer using a network processor," in Proc. of ACM/IEEE Symposium on Architectures for Networking and Communication Systems (ANCS), Princeton, NJ, Oct. 2005, pp. 135-143.
28. T. Wolf, R. Ramaswamy, S. Bunga, and N. Yang, "An architecture for distributed real-time passive network measurement," in Proc. of 14th Annual Meeting of the IEEE/ACM International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems (MASCOTS), Monterey, CA, Sept. 2006, pp. 335-344.
29. R. Ramaswamy and T. Wolf, "PacketBench: A tool for workload characterization of network processing," in Proc. of IEEE 6th Annual Workshop on Workload Characterization (WWC-6), Austin, TX, Oct. 2003, pp. 42-50.
30. R. Ramaswamy, N. Weng, and T. Wolf, "Analysis of network processing workloads," in Proc. of IEEE International Symposium on Performance Analysis of Systems and Software (ISPASS), Austin, TX, Mar. 2005, pp. 226-235.
31. N. Weng and T. Wolf, "Profiling and mapping of parallel workloads on network processors," in Proc. of The 20th Annual ACM Symposium on Applied Computing (SAC), Santa Fe, NM, Mar. 2005, pp. 890-896.
32. PayloadPlus™ Fast Pattern Processor, Lucent Technologies Inc., Apr. 2000, http://www.agere.com/support/non-nda/docs/FPPProductBrief.pdf.
33. J. Allen, B. Bass, C. Basso, R. Boivie, J. Calvignac, G. Davis, L. Frelechoux, M. Heddes, A. Herkersdorf, A. Kind, J. Logan, M. Peyravian, M. Rinaldi, R. Sabhikhi, M. Siegel, and M. Waldvogel, "IBM PowerNP network processor: Hardware, software, and applications," IBM Journal of Research and Development, vol. 47, no. 2/3, pp. 177-194, 2003.
34. J. Cleary, S. Donnelly, I. Graham, A. McGregor, and M. Pearson, "Design principles for accurate passive measurement," in Passive and Active Measurement Workshop (PAM 2000), Hamilton, New Zealand, Apr. 2000.