Coordinated Sampling: An Efficient, Network-Wide Approach for Flow Monitoring

Abstract

We present Coordinated Sampling, a new technique for improved flow-level monitoring. Our approach derives from three key design decisions: flow sampling instead of uniform packet sampling; hash-based flow selection to achieve coordination between routers without needing explicit communication channels; and an approach for distributing responsibilities across routers to achieve network-wide monitoring objectives while taking into account resource constraints on each router. We demonstrate that Coordinated Sampling presents an attractive solution for ISPs. First, it more than doubles flow coverage to support security applications and does so without compromising the accuracy of traditional traffic engineering applications. Second, it enables network operators to directly specify and achieve fine-grained network-wide monitoring objectives. Third, it naturally load balances monitoring responsibilities across routers and at the same time efficiently leverages the available capacity on each router.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Jul 16, 2007
Accession Number
ADA476823

Entities

People

  • Hui Zhang
  • Michael Reiter
  • Vyas Sekar
  • Walter Willinger

Organizations

  • Carnegie Mellon University

Tags

Communities of Interest

  • Cyber
  • Materials and Manufacturing Processes

DTIC Thesaurus Topics

  • Accounting
  • Accuracy
  • Algorithms
  • Anomaly Detection
  • Bandwidth
  • Change Detection
  • Computer Science
  • Detection
  • Engineering
  • Errors
  • Identification
  • Measurement
  • Optimization
  • Security
  • Simulators
  • Test And Evaluation
  • Topology

Fields of Study

  • Computer science

Readers

  • Computer Networking
  • Regression Analysis.