Wire-speed statistical classification of network traffic on commodity hardware

Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC

Volumn , Issue , 2012, Pages 65-71

  Santiago Del Rio, Pedro M ^a   Rossi, Dario ^b   Gringoli, Francesco ^c   Nava, Lorenzo ^c   Salgarelli, Luca ^c   Aracil, Javier ^a  

^a UNIVERSIDAD AUTÓNOMA DE MADRID   (Spain)

^b TELECOM PARISTECH   (France)

^c UNIVERSITY OF BRESCIA   (Italy)

Author keywords

commodity hardware; statistical identification; traffic monitoring

Indexed keywords

10 GBPS; 10 GBPS ETHERNET; CLASSIFICATION RATES; COMMODITY HARDWARE; CRITICAL PARAMETER; FRAME SIZE; HARDWARE ENVIRONMENT; MULTI CORE; NETWORK DRIVER; NETWORK TRAFFIC; PACKET RATE; SOFTWARE APPLICATIONS; SOFTWARE-BASED; STATE OF THE ART; STATISTICAL CLASSIFICATION; STATISTICAL CLASSIFICATION TECHNIQUES; TRAFFIC CLASSIFICATION; TRAFFIC MONITORING;

TELECOMMUNICATION TRAFFIC;

HARDWARE;

EID: 84870911205     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2398776.2398784     Document Type: Conference Paper

References (31)

1. L. Bernaille, R. Teixeira, and K. Salamatian. Early application identification. In ACM CoNEXT 2006.
2. N. Bonelli, A. Di Pietro, S. Giordano, and G. Procissi. On multi-gigabit packet capturing with multi-core commodity hardware. In Passive and Active Measurement (PAM) 2012.
3. J. Bonwick. The slab allocator: An object-caching kernel memory allocator. In USENIX Summer Technical Conference 1994.
4. A. Cardigliano, J. Gasparakis, and F. Fusco. vPF RING: Towards wire-speed network monitoring using virtual machines. In ACM IMC 2011.
5. M. Crotti, M. Dusi, F. Gringoli, and L. Salgarelli. Traffic classification through simple statistical fingerprinting. ACM SIGCOMM Comput. Commun. Rev., 37(1):5-16, 2007.
6. A. Dainotti, A. Pescape, and K. Claffy. Issues and future directions in traffic classification. Network, IEEE, 26(1):35-40, 2012.
7. M. Danelutto, L. Deri, and D. De Sensi. Network monitoring on multicores with algorithmic skeletons. In International Conference on Parallel Computing (PARCO) 2011.
8. L. Deri. IP traffic monitoring at 10 Gbit and above. http://www.terena. org/activities/ngn-ws/ws2/deri-10g.pdf.
9. A. Finamore, M. Mellia, M. Meo, M. Munafo, and D. Rossi. Experiences of Internet traffic monitoring with Tstat. Network, IEEE, 25(3):8-14, 2011.
10. F. Fusco and L. Deri. High speed network traffic analysis with commodity multi-core systems. In ACM IMC 2010.
11. S. Han, K. Jang, K. Park, and S. Moon. PacketShader: a GPU-accelerated software router. In ACM SIGCOMM Comput. Commun. Rev., volume 40, pages 195-206, 2010.
12. C. Inacio and B. Trammell. YAF: yet another flowmeter. In International conference on Large installation system administration (LISA) 2010.
13. Intel. Intel ĺ 82599 10 GbE Controller Datasheet. October, (December), 2010.
14. H. Kim, K. Claffy, M. Fomenkov, D. Barman, M. Faloutsos, and K. Lee. Internet traffic classification demystified: myths, caveats, and the best practices. In ACM CoNEXT 2008.
15. A. Lim and R. Kinsella. Data plane packet processing on embedded intel architecture platforms. http://download.intel.com/design/intarch/papers/322516. pdf.
16. Y. Lim, H. Kim, J. Jeong, C. Kim, T. Kwon, and Y. Choi. Internet traffic classification demystified: on the sources of the discriminative power. In ACM CoNEXT 2010.
17. Y. Liu, D. Xu, L. Sun, and D. Liu. Accurate traffic classification with multi-threaded processors. In IEEE International Symposium on Knowledge Acquisition and Modeling Workshop (KAM) 2008.
18. A. Mitra, W. Najjar, and L. Bhuyan. Compiling PCRE to FPGA for accelerating SNORT IDS. In ACM/IEEE Symposium on Architecture for networking and communications systems (ANCS) 2007.
19. D. Moore, K. Keys, R. Koga, E. Lagache, and K. C. Claffy. The CoralReef software suite as a tool for system and network administrators. In USENIX conference on System administration 2001.
20. T. Nguyen and G. Armitage. A survey of techniques for Internet traffic classification using machine learning. Communications Surveys & Tutorials, IEEE, 10(4):56-76, 2008.
21. NVIDIA Corporation. NVIDIA GPUDirect Technology. http://developer. download.nvidia. com/devzone//devcenter/cuda/docs/GPUDirect-Technology-Overview. pdf.
22. Y. Qi, B. Xu, F. He, B. Yang, J. Yu, and J. Li. Towards high-performance flow-level packet processing on multi-core network processors. In ACM/IEEE Symposium on Architecture for networking and communications systems (ANCS) 2007.
23. L. Rizzo. netmap: a novel framework for fast packet I/O. In USENIX Annual Technical Conference 2012.
24. L. Rizzo, M. Carbone, and G. Catalli. Transparent acceleration of software packet forwarding using netmap. In IEEE INFOCOM 2012.
25. D. Rossi and M. Mellia. Real-time TCP/IP analysis with common hardware. In IEEE ICC 2006.
26. D. Rossi, S. Valenti, P. Veglia, D. Bonfiglio, M. Mellia, and M. Meo. Pictures from the Skype. ACM Performance Evaluation Review (PER), 36(2):83-86, 2008.
27. G. Szabó, I. Gódor, A. Veres, S. Malomsoky, and S. Molnár. Traffic classification over Gbit speed with commodity hardware. IEEE J. Communications Software and Systems, 5, 2010.
28. G. Vasiliadis, M. Polychronakis, and S. Ioannidis. MIDeA: a multi-parallel intrusion detection architecture. In ACM conference on Computer and communications security (CSS) 2011.
29. C. Walsworth, E. Aben, k. claffy, and D. Andersen. The CAIDA anonymized 2009 Internet traces. http://www.caida.org/data/passive/passive-2009-dataset. xml.
30. D. Wang, Y. Xue, and Y. D. Memory-efficient hypercube flow table for packet processing on multi-cores. In IEEE GLOBECOM 2011.
31. W. Wu, P. DeMar, and M. Crawford. Why can some advanced Ethernet NICs cause packet reordering? IEEE Communications Letters, 15(2):253-255, 2011.