Real-Time IP Flow Measurement Tool with Scalable Architecture

書誌事項

公開日
2004-12-01
資源種別
journal article
権利情報
  • 一般社団法人電子情報通信学会
公開者
電子情報通信学会

この論文をさがす

説明

There is an emerging requirement for real-time flow-based traffic monitoring, which is vital to detecting and/or tracing DoS attacks as well as troubleshooting and traffic engineering in the ISP networks. We propose the architecture for a scalable real-time flow measurement tool in order to allow operators to flexibly define "the targeted flows" on-demand, to obtain various statistics on those flows, and to visualize them in a real-time manner. A traffic distribution device and multiple traffic capture devices processing packets in parallel are included in the architecture, in which the former device copies traffic and distributes it to the latter devices. We evaluate the performance of a proto-type implementation on PC-UNIX in testbed experiments to demonstrate the scalability of our architecture. The evaluation shows that the performance increases in proportion to the number of the capture devices and the maximum performance reaches 80 K pps with six capture devices. Finally we also show applications of our tool, which indicate the advantage of flexible fine-grained flow measurements.

収録刊行物

被引用文献 (1)*注記

もっと見る

参考文献 (27)*注記

もっと見る

詳細情報 詳細情報について

問題の指摘

ページトップへ