CSAMP: A system for network-wide flow monitoring

5th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2008

Volumn , Issue , 2008, Pages 233-246

  Sekar, Vyas ^a   Reiter, Michael K ^b   Willinger, Walter ^c   Zhang, Hui ^a   Kompella, Ramana Rao ^d   Andersen, David G ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b UNIVERSITY OF NORTH CAROLINA   (United States)

^c AT AND T LABS RESEARCH   (United States)

^d PURDUE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SYSTEMS ANALYSIS;

CURRENT FLOWS; EXPLICIT COMMUNICATION; FLOW LEVEL MEASUREMENT; FLOW MONITORING; FLOW SAMPLING; PACKET SAMPLING; RESOURCE CONSTRAINT; SYSTEM WIDE APPROACHES;

MONITORING;

EID: 84999424855     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (43)

1. BALLANI, H., AND FRANCIS, P. CONMan: A Step Towards Network Manageability. In Proc. of ACM SIGCOMM (2007).
2. CAESAR, M., CALDWELL, D., FEAMSTER, N., REXFORD, J., SHAIKH, A., AND VAN DER MERWE, J. Design and implementation of a Routing Control Platform. In Proc. of NSDI (2005).
3. CANTIENI, G. R., IANNACCONE, G., BARAKAT, C., DIOT, C., AND THIRAN, P. Reformulating the Monitor Placement problem: Optimal Network-Wide Sampling. In Proc. of CoNeXT (2006).
4. CHADET, C., FLEURY, E., LASSOUS, I., HERVÉ, AND VOGE, M.-E. Optimal Positioning of Active and Passive Monitoring Devices . In Proc. of CoNeXT (2005).
5. CLAISE, B. Cisco Systems NetFlow Services Export Version 9. RFC 3954.
6. COLLINS, M. P., AND REITER, M. K. Finding Peer-to-Peer File-sharing using Coarse Network Behaviors. In Proc. of ESORICS (2006).
7. DREGER, H., FELDMANN, A., KRISHNAMURTHY, B., WALLERICH, J., AND WILLINGER, W. A Methodology for Studying Persistency Aspects of Internet Flows. ACM SIGCOMM CCR 35, 2 (Apr. 2005).
8. DUFFIELD, N., AND GROSSGLAUSER, M. Trajectory Sampling for Direct Traffic Observation. In Proc. of ACM SIGCOMM (2001).
9. DUFFIELD, N., LUND, C., AND THORUP, M. Charging from sampled network usage. In Proc. of IMW (2001).
10. DUFFIELD, N., LUND, C., AND THORUP, M. Learn more, sample less: Control of volume and variance in network measurement. IEEE Transactions in Information Theory 51, 5 (2005), 1756-1775.
11. ESTAN, C., KEYS, K., MOORE, D., AND VARGHESE, G. Building a Better NetFlow. In Proc. of ACM SIGCOMM (2004).
12. ESTAN, C., AND VARGHESE, G. New Directions in Traffic Measurement and Accounting. In Proc. of ACM SIGCOMM (2002).
13. FELDMANN, A., GREENBERG, A. G., LUND, C., REINGOLD, N., REXFORD, J., AND TRUE, F. Deriving Traffic Demands for Operational IP Networks: Methodology and Experience. In Proc. of ACM SIGCOMM (2000).
14. GREENBERG, A., HJALMTYSSON, G., MALTZ, D. A., MEYERS, A., REXFORD, J., XIE, G., YAN, H., ZHAN, J., AND ZHANG, H. A Clean Slate 4D Approach to Network Control and Management. ACM SIGCOMM CCR 35, 5 (Oct. 2005).
15. HOHN, N., AND VEITCH, D. Inverting Sampled Traffic. In Proc. of IMC (2003).
16. KARAGIANNIS, T., PAPAGIANNAKI, D., AND FALOUTSOS, M. BLINC: Multilevel Traffic Classification in the Dark. In Proc. of ACM SIGCOMM (2005).
17. KOMPELLA, R., AND ESTAN, C. The Power of Slicing in Internet Flow Measurement. In Proc. of IMC (2005).
18. KUMAR, A., SUNG, M., XU, J., AND WANG, J. Data Streaming Algorithms for Efficient and Accurate Estimation of Flow Distribution. In Proc. of ACM SIGMETRICS (2004).
19. LAKHINA, A., CROVELLA, M., AND DIOT, C. Diagnosing Network-Wide Traffic Anomalies. In Proc. of ACM SIGCOMM (2004).
20. LAKHINA, A., PAPAGIANNAKI, K., CROVELLA, M., DIOT, C., KOLACZYK, E., AND TAFT, N. Structural Analysis of Network Traffic Flows. In Proc. of ACM SIGMETRICS (2004).
21. LALL, A., SEKAR, V., XU, J., OGIHARA, M., AND ZHANG, H. Data Streaming Algorithms for Estimating Entropy of Network Traffic. In Proc. of ACM SIGMETRICS (2006).
22. LI, J., SUNG, M., XU, J., LI, L., AND ZHAO, Q. Large-scale IP Traceback in High-speed Internet: Practical Techniques and Theoretical Foundation. In Proc. of IEEE Symposium of Security and Privacy (2004).
23. LI, X., BIAN, F., ZHANG, H., DIOT, C., GOVINDAN, R., HONG, W., AND IANNACCONE, G. MIND: A Distributed Multidimensional Indexing for Network Diagnosis. In Proc. of IEEE INFOCOM (2006).
24. MAHAJAN, R., SPRING, N., WETHERALL, D., AND ANDERSON, T. Inferring Link Weights using End-to-End Measurements. In Proc. of IMW (2002).
25. MAI, J., CHUAH, C.-N., SRIDHARAN, A., YE, T., AND ZANG, H. Is Sampled Data Sufficient for Anomaly Detection? In Proc. of IMC (2006).
26. MOLINA, M., NICCOLINI, S., AND DUFFIELD, N. A Comparative Experimental Study of Hash Functions Applied to Packet Sampling. In Proc. of International Teletraffic Congress (ITC) (2005).
27. RAMACHANDRAN, A., SEETHARAMAN, S., FEAMSTER, N., AND VAZIRANI, V. Building a Better Mousetrap. Georgia Tech Technical Report, GIT-CSS-07-01, 2007.
28. ROUGHAN, M., GREENBERG, A., KALMANEK, C., RUMSEWICZ, M., YATES, J., AND ZHANG, Y. Experience in Measuring Internet Backbone Traffic Variability:Models, Metrics, Measurements and Meaning. In Proc. of International Teletraffic Congress (ITC) (2003).
29. SAVAGE, S., WETHERALL, D., KARLIN, A., AND ANDERSON, T. Practical Network Support for IP Traceback. In Proc. of ACM SIGCOMM (2000).
30. SEKAR, V., DUFFIELD, N., VAN DER MERWE, K., SPATSCHECK, O., AND ZHANG, H. LADS: Large-scale Automated DDoS Detection System. In Proc. of USENIX ATC (2006).
31. SEKAR, V., REITER, M. K., WILLINGER, W., AND ZHANG, H. Coordinated Sampling: An Efficient Network-wide Approach for Flow Monitoring. Technical Report, CMU-CS-07-139, Computer Science Dept, Carnegie Mellon University, 2007.
32. SHAIKH, A., AND GREENBERG, A. OSPF Monitoring: Architecture, Design and Deployment Experience. In Proc. of NSDI (2004).
33. SHARMA, M. R., AND BYERS, J. W. Scalable Coordination Techniques for Distributed Network Monitoring. In Proc. ofPAM (2005).
34. SPRING, N., MAHAJAN, R., AND WETHERALL, D. Measuring ISP Topologies with Rocketfuel. In Proc. of ACM SIGCOMM (2002).
35. SUH, K., GUO, Y., KUROSE, J., AND TOWSLEY, D. Locating Network Monitors: Complexity, heuristics and coverage. In Proc. of IEEE INFOCOM (2005).
36. VARGHESE, G. Network Algorithmics. Morgan Kaufman, 2005.
37. WHITE, B., LEPREAU, J., STOLLER, L., RICCI, R., GURUPRASAD, S., NEWBOLD, M., HIBLER, M., BARB, C., AND JOGLEKAR, A. An Integrated Experimental Environment for Distributed Systems and Networks. In Proc. of OSDI (2002).
38. XIE, Y., SEKAR, V., MALTZ, D. A., REITER, M. K., AND ZHANG, H. Worm Origin Identification Using Random Moonwalks. In Proc. of IEEE Symposium on Security and Privacy (2005).
39. YANG, X., WETHERALL, D., AND ANDERSON, T. A DoS-limiting Network Architecture. In Proc. of ACM SIGCOMM (2005).
40. ZHANG, Y., BRESLAU, L., PAXSON, V., AND SHENKER, S. On the Characteristics and Origins of Internet Flow Rates. In Proc. of ACM SIGCOMM (2002).
41. ZHANG, Y., ROUGHAN, M., DUFFIELD, N., AND GREENBERG, A. Fast Accurate Computation of Large-scale IP Traffic Matrices from Link Loads. In Proc. of ACM SIGMETRICS (2003).
42. ZHAO, Q., GE, Z., WANG, J., AND XU, J. Robust Traffic Matrix Estimation with Imperfect Information: Making use of Multiple Data Sources. In Proc. of ACM SIGMETRICS (2006).
43. ZHAO, Q., XU, J., AND LIU, Z. Design of a novel statistics counter architecture with optimal space and time efficiency. In Proc. of ACM SIGMETRICS (2006).