Sciweavers

Share
INFOCOM
2011
IEEE

RelSamp: Preserving application structure in sampled flow measurements

10 years 3 months ago
RelSamp: Preserving application structure in sampled flow measurements
—The Internet has significantly evolved in the number and variety of applications. Network operators need mechanisms to constantly monitor and study these applications. Given modern applications routinely consist of several flows, potentially to many different destinations, existing measurement approaches such as Sampled NetFlow sample only a few flows per application session. To address this issue, in this paper, we introduce RelSamp architecture that implements the notion of related sampling where flows that are part of the same application session are given higher probability. In our evaluation using real traces, we show that RelSamp achieves 5-10x more flows per application session compared to Sampled NetFlow for the same effective number of sampled packets. We also show that behavioral and statistical classification approaches such as BLINC, SVM and C4.5 achieve up to 50% better classification accuracy compared to Sampled NetFlow, while not breaking existing management ta...
Myungjin Lee, Mohammad Y. Hajjat, Ramana Rao Kompe
Added 30 Aug 2011
Updated 30 Aug 2011
Type Journal
Year 2011
Where INFOCOM
Authors Myungjin Lee, Mohammad Y. Hajjat, Ramana Rao Kompella, Sanjay G. Rao
Comments (0)
books