A Hybrid Sampling Approach for Network Flow Monitoring.

Guang Cheng,Jian Gong,Yongning Tang
DOI: https://doi.org/10.1109/E2EMON.2007.375315
2007-01-01
Abstract:Online flow distribution monitoring is critical in instruction detection. However, high-speed traffic monitoring is significantly challenging for a monitoring system with limited resources (e.g., memory and processing cycles). Flow and packet sampling techniques are commonly adopted to tackle this problem. Flow sampling are reduce the variance of the estimators in short flows; However, it increases the estimated error for the heavy-tailed flow. On the other hand, passive sampling presents an opposite results. In this paper, we propose a novel flow sampling approach by taking advantage of both packet and flow sampling techniques. An effective flow estimator is also introduced to estimate flow distributions. Extensive simulations are conducted with real traffic data from CERNET backbone network traffic traces to evaluate the system performance and compare it with other traffic sampling approaches.
What problem does this paper attempt to address?