Real-Time TCP/IP Analysis with Common Hardware
- 1 June 2006
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- Vol. 2 (15503607) , 729-735
- https://doi.org/10.1109/icc.2006.254794
Abstract
Traffic measurement represents an indispensable and valuable tool for the analysis of nowadays telecommunication networks. Moreover, it is desirable for traffic measurement and analysis to be both continuous and persistent, since only these joint requirements allow to track important changes on the traffic pattern. On the other hand, transmission links bandwidth keep improving, at a seemingly inexorable rate: therefore, the analysis of the traffic is becoming more complex than ever. This paper focuses on the description and the benchmarking of a network traffic analyzer, called Tstat, able to process real-time traffic further providing i) several advanced measurement indexes of transport layer protocols and ii) ever-lasting monitoring capabilities. Particularly, our aim is to assess what kind of links, and under which load, can be continuously and persistently monitored without compromising the complexity of the traffic analysis that has to be performed.Keywords
This publication has 6 references indexed in Scilit:
- Measuring IP and TCP behavior on edge nodes with TstatComputer Networks, 2005
- Monitoring very high speed linksPublished by Association for Computing Machinery (ACM) ,2001
- Bro: a system for detecting network intruders in real-timeComputer Networks, 1999
- Fast and scalable layer four switchingACM SIGCOMM Computer Communication Review, 1998
- Empirically derived analytic models of wide-area TCP connectionsIEEE/ACM Transactions on Networking, 1994
- Characteristics of wide-area TCP/IP conversationsPublished by Association for Computing Machinery (ACM) ,1991