PEMONAS: Passive Ethernet traffic MONitoring and AnalySis system

Abstract

Due to the swift growth of network communication, Network monitoring is necessary for evaluating performance issues, recognizing and locating problems. There is increasing interest in passive monitoring obeying to high-bandwidth requirements. In order to decipher how to place monitors under cost-effective and real-time constraints within the network, a new approach is presented in this paper, which solves the problem of monitoring high bitrates and convenes three often-conflicting requirements. The first is supporting high bitrates (over 400 megabytes per second), and hence huge system throughputs. The second is opening a gigabyte file (over 100 Gigabytes) while insuring the real-time analysis of its data, and the third is running only one off-the-shelf and cost-effective computer. The monitoring and analysis chore in our system allows online and offline analysis. Its challenging task is collecting and analyzing such huge data on real-time using a centralized processing architecture.