首页 > 最新文献

Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)最新文献

英文 中文
Implementation of an IPFIX compliant flow traffic meter: challenges and performance assessment 符合IPFIX的流量流量计的实现:挑战和性能评估
A. Molina, S. Tartarelli, F. Raspall, S. Niccolini
Several tools are already available for measuring IP traffic flows. However, a standard for exporting results is still missing and the IETF IPFIX WG (IP flow information export working group) is currently working towards this target. We present a prototype implementation of an IPFIX compliant flow meter and discuss its major challenges. Through an extensive profiling activity, we try to point out which operations are most critical for scalability issues. The latter can be raised by both a large number of contemporary flows and a high packet input rate. We finally provide some indicative figures of the incoming traffic rate, which can be reliably monitored with the platform we used to test our implementation.
已有几种工具可用于测量IP流量。然而,导出结果的标准仍然缺失,IETF IPFIX工作组(IP流信息导出工作组)目前正在朝着这个目标努力。我们提出了一个符合IPFIX的流量计的原型实现,并讨论了其主要挑战。通过广泛的分析活动,我们试图指出哪些操作对可伸缩性问题最为关键。后者可以通过大量的当代流和高数据包输入率来提高。我们最后提供了一些传入流量率的指示性数据,这些数据可以通过我们用来测试实现的平台进行可靠的监控。
{"title":"Implementation of an IPFIX compliant flow traffic meter: challenges and performance assessment","authors":"A. Molina, S. Tartarelli, F. Raspall, S. Niccolini","doi":"10.1109/IPOM.2003.1251225","DOIUrl":"https://doi.org/10.1109/IPOM.2003.1251225","url":null,"abstract":"Several tools are already available for measuring IP traffic flows. However, a standard for exporting results is still missing and the IETF IPFIX WG (IP flow information export working group) is currently working towards this target. We present a prototype implementation of an IPFIX compliant flow meter and discuss its major challenges. Through an extensive profiling activity, we try to point out which operations are most critical for scalability issues. The latter can be raised by both a large number of contemporary flows and a high packet input rate. We finally provide some indicative figures of the incoming traffic rate, which can be reliably monitored with the platform we used to test our implementation.","PeriodicalId":128315,"journal":{"name":"Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122242086","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 6
A bicriteria optimization approach for robust OSPF routing 鲁棒OSPF路由的双标准优化方法
D. Yuan
For intra-domain routing, open shortest path first (OSPF) is the most commonly used protocol. In OSPF, traffic is routed using paths that are shortest with respect to a set of link costs. One problem is the optimization of OSPF link costs. The problem amounts to finding a set of link costs such that the total network congestion is minimized. We consider robust OSPF routing that takes into account the impact of link failures. The optimized link costs for the non-failure scenario do not necessarily minimize the congestion when a link failure occurs. An OSPF routing solution is robust if it not only leads to low congestion in the non-failure scenario, but also attempts to minimize the impact of link failures. To address this problem, we present a bicriteria optimization model, which simultaneously considers the congestion of the normal state and that of the failure states. Previously proposed methods for bicriteria optimization problems often involve weighting together the two objective functions. We propose a different approach using an artificial objective function. When embedded into a local search algorithm, the function guides the search towards Pareto-optimal solutions. These solutions can be used for analyzing the trade-off between the congestion of the normal state and that of the failure states. The proposed algorithm can therefore be used as an aid for implementing robust OSPF routing.
对于域内路由,OSPF (open shortest path first)是最常用的协议。在OSPF中,流量使用相对于一组链路开销而言最短的路径进行路由。其中一个问题是OSPF链路开销的优化。这个问题相当于找到一组链路成本,使总网络拥塞最小化。我们考虑考虑到链路故障影响的健壮OSPF路由。当链路发生故障时,针对非故障场景优化的链路开销并不一定会使拥塞最小化。如果OSPF路由解决方案不仅在非故障情况下实现低拥塞,而且尽量减少链路故障的影响,那么它就是鲁棒的。为了解决这一问题,我们提出了一个双准则优化模型,该模型同时考虑了正常状态和故障状态的拥塞。以前提出的双准则优化问题的方法通常涉及两个目标函数的加权。我们提出了一种使用人工目标函数的不同方法。当嵌入到局部搜索算法中时,该函数引导搜索到帕累托最优解。这些解决方案可用于分析正常状态拥塞和故障状态拥塞之间的权衡。因此,该算法可以作为实现鲁棒OSPF路由的辅助手段。
{"title":"A bicriteria optimization approach for robust OSPF routing","authors":"D. Yuan","doi":"10.1109/IPOM.2003.1251229","DOIUrl":"https://doi.org/10.1109/IPOM.2003.1251229","url":null,"abstract":"For intra-domain routing, open shortest path first (OSPF) is the most commonly used protocol. In OSPF, traffic is routed using paths that are shortest with respect to a set of link costs. One problem is the optimization of OSPF link costs. The problem amounts to finding a set of link costs such that the total network congestion is minimized. We consider robust OSPF routing that takes into account the impact of link failures. The optimized link costs for the non-failure scenario do not necessarily minimize the congestion when a link failure occurs. An OSPF routing solution is robust if it not only leads to low congestion in the non-failure scenario, but also attempts to minimize the impact of link failures. To address this problem, we present a bicriteria optimization model, which simultaneously considers the congestion of the normal state and that of the failure states. Previously proposed methods for bicriteria optimization problems often involve weighting together the two objective functions. We propose a different approach using an artificial objective function. When embedded into a local search algorithm, the function guides the search towards Pareto-optimal solutions. These solutions can be used for analyzing the trade-off between the congestion of the normal state and that of the failure states. The proposed algorithm can therefore be used as an aid for implementing robust OSPF routing.","PeriodicalId":128315,"journal":{"name":"Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)","volume":"258 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133172923","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 37
An algorithm for rerouting in traffic engineering of MPLS based IP networks 基于MPLS的IP网络流量工程中的路由重路由算法
M. Girish, B. Zhou, Jianqiang Hu
Multiprotocol label switching (MPLS) enables IP networks with quality of service to be traffic engineered well. Rerouting and bumping of label switched paths (LSP) are caused by link or node failure or recovery, connection admission or load balancing. We develop an algorithm for the traffic engineering problem associated with rerouting.
MPLS (Multiprotocol label switching,多协议标签交换)使具有高服务质量的IP网络能够实现良好的流量工程。LSP (label switched paths)的重路由和碰撞是由链路或节点故障或恢复、连接允许或负载均衡引起的。我们开发了一种与重路由相关的交通工程问题的算法。
{"title":"An algorithm for rerouting in traffic engineering of MPLS based IP networks","authors":"M. Girish, B. Zhou, Jianqiang Hu","doi":"10.1109/IPOM.2003.1251232","DOIUrl":"https://doi.org/10.1109/IPOM.2003.1251232","url":null,"abstract":"Multiprotocol label switching (MPLS) enables IP networks with quality of service to be traffic engineered well. Rerouting and bumping of label switched paths (LSP) are caused by link or node failure or recovery, connection admission or load balancing. We develop an algorithm for the traffic engineering problem associated with rerouting.","PeriodicalId":128315,"journal":{"name":"Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)","volume":"41 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121805776","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Performance evaluation of telephony routing over IP (TRIP) IP电话路由(TRIP)性能评价
Matthew C Schlesener, Joseph Evans, Gary Minden, user user, C. User
A new signaling protocol being developed for use in the Internet or an enterprise IP network is analyzed. The protocol is telephony routing over IP (TRIP). The most basic function of TRIP is to locate the optimum gateway on a voice over IP (VoIP) network connected to the public switched telephone network (PSTN). TRIP is analyzed from a carrier perspective and performance results are discussed.
分析了一种用于Internet或企业IP网络的新的信令协议。该协议是基于IP的电话路由(TRIP)。TRIP最基本的功能是定位与PSTN (public switched telephone network)相连的VoIP (voice over IP)网络上的最佳网关。从载波角度对TRIP进行了分析,并对性能结果进行了讨论。
{"title":"Performance evaluation of telephony routing over IP (TRIP)","authors":"Matthew C Schlesener, Joseph Evans, Gary Minden, user user, C. User","doi":"10.1109/IPOM.2003.1251223","DOIUrl":"https://doi.org/10.1109/IPOM.2003.1251223","url":null,"abstract":"A new signaling protocol being developed for use in the Internet or an enterprise IP network is analyzed. The protocol is telephony routing over IP (TRIP). The most basic function of TRIP is to locate the optimum gateway on a voice over IP (VoIP) network connected to the public switched telephone network (PSTN). TRIP is analyzed from a carrier perspective and performance results are discussed.","PeriodicalId":128315,"journal":{"name":"Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)","volume":"50 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122081326","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 11
Traffic balancing via smart packets 通过智能报文分担流量
E. Gelenbe, R. Lent, A. Núñez
The World Wide Web (WWW) has caught people's attention since its inception and today is a major source of traffic in the Internet. WWW traffic is typically asymmetric: servers receive small requests but answer with large number of packets. To ensure good service, WWW servers require a large egress bandwidth to the Internet. We propose an innovative approach to connect Web servers to the Internet via many outgoing connections. We employ cognitive packet networks to make packets learn which link provides the best quality for each client so as to balance the WWW traffic effectively. Egress bandwidth can easily be increased by increasing the number of links to the Internet. The paper describes our traffic engineering approach, an implementation model, a testbed platform in the context of the Linux kernel, and measurement data; these indicate the usefulness of our proposal.
万维网(WWW)自诞生以来就引起了人们的注意,今天是互联网流量的主要来源。WWW流量通常是不对称的:服务器接收小的请求,但是用大量的数据包回答。为了保证良好的服务,WWW服务器需要向Internet提供很大的出口带宽。我们提出了一种创新的方法,通过许多传出连接将Web服务器连接到Internet。我们采用认知分组网络,使分组学习哪条链路对每个客户端提供最好的质量,从而有效地平衡WWW流量。通过增加到Internet的链接数量,可以很容易地增加出口带宽。本文介绍了我们的流量工程方法、实现模型、Linux内核环境下的测试平台和测量数据;这些表明我们的建议是有用的。
{"title":"Traffic balancing via smart packets","authors":"E. Gelenbe, R. Lent, A. Núñez","doi":"10.1109/IPOM.2003.1251219","DOIUrl":"https://doi.org/10.1109/IPOM.2003.1251219","url":null,"abstract":"The World Wide Web (WWW) has caught people's attention since its inception and today is a major source of traffic in the Internet. WWW traffic is typically asymmetric: servers receive small requests but answer with large number of packets. To ensure good service, WWW servers require a large egress bandwidth to the Internet. We propose an innovative approach to connect Web servers to the Internet via many outgoing connections. We employ cognitive packet networks to make packets learn which link provides the best quality for each client so as to balance the WWW traffic effectively. Egress bandwidth can easily be increased by increasing the number of links to the Internet. The paper describes our traffic engineering approach, an implementation model, a testbed platform in the context of the Linux kernel, and measurement data; these indicate the usefulness of our proposal.","PeriodicalId":128315,"journal":{"name":"Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)","volume":"63 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134458760","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
Off-line reduced complexity layout design for MPLS networks 脱机降低MPLS网络布局设计的复杂性
S. Beker, D. Kofman, N. Puech
One of the main reasons for the present market enthusiasm for the MPLS architecture is its capability for implementing evolved traffic engineering (TE) functionalities, as they are required, for example, to support the next generation Internet. MPLS paths (LSPs) can be calculated on-line, as demands arrive, or off-line for a given estimate of the traffic matrix. Off-line calculation has the advantage of enabling a globally optimal network design. From the operational standpoint, the layout design for a large network should consider minimizing the layout complexity, thus reducing the cost of operation. Layout optimization objectives usually aim at minimizing total delay in the network, maximum loaded link, or any other function of link loads. To address the layout complexity issue, we propose an optimization problem whose objective is to minimize the number of required paths, while an end-to-end path delay constraint provides the required quality of service (QoS) guarantees. To solve the resulting multicommodity flow allocation problem, a MINLP (mixed integer non linear program) formulation is used. The results are then compared to the solutions obtained with a commonly used cost function, which does not consider complexity.
目前市场对MPLS架构热情高涨的主要原因之一是其实现演进流量工程(TE)功能的能力,例如,这些功能是支持下一代互联网所必需的。MPLS路径(lsp)可以在需求到达时在线计算,也可以根据给定的流量矩阵估计离线计算。离线计算具有全局最优网络设计的优点。从运营角度来看,大型网络的布局设计应考虑最小化布局复杂性,从而降低运营成本。布局优化的目标通常是最小化网络总延迟、最大加载链路或链路负载的任何其他功能。为了解决布局复杂性问题,我们提出了一个优化问题,其目标是最小化所需路径的数量,而端到端路径延迟约束提供了所需的服务质量(QoS)保证。为了解决由此产生的多商品流分配问题,采用了混合整数非线性规划(MINLP)公式。然后将结果与不考虑复杂性的常用成本函数得到的解进行比较。
{"title":"Off-line reduced complexity layout design for MPLS networks","authors":"S. Beker, D. Kofman, N. Puech","doi":"10.1109/IPOM.2003.1251230","DOIUrl":"https://doi.org/10.1109/IPOM.2003.1251230","url":null,"abstract":"One of the main reasons for the present market enthusiasm for the MPLS architecture is its capability for implementing evolved traffic engineering (TE) functionalities, as they are required, for example, to support the next generation Internet. MPLS paths (LSPs) can be calculated on-line, as demands arrive, or off-line for a given estimate of the traffic matrix. Off-line calculation has the advantage of enabling a globally optimal network design. From the operational standpoint, the layout design for a large network should consider minimizing the layout complexity, thus reducing the cost of operation. Layout optimization objectives usually aim at minimizing total delay in the network, maximum loaded link, or any other function of link loads. To address the layout complexity issue, we propose an optimization problem whose objective is to minimize the number of required paths, while an end-to-end path delay constraint provides the required quality of service (QoS) guarantees. To solve the resulting multicommodity flow allocation problem, a MINLP (mixed integer non linear program) formulation is used. The results are then compared to the solutions obtained with a commonly used cost function, which does not consider complexity.","PeriodicalId":128315,"journal":{"name":"Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)","volume":"28 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133453027","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
IPv6 migration implications for network management - introducing the site transitioning framework (STF) IPv6迁移对网络管理的影响——介绍站点过渡框架(STF)
Michael Mackay, Christopher Edwards
The paper outlines the need to supplement the current work on network management for IPv6 with a system specifically to support IP transitioning. As something that is likely to play a major role in any IPv6 network for the considerable future, support for managing the transitioning aspects of managed networks is vital in terms of their infrastructure and service provision. While there is work being carried out within the IETF and other bodies on the management of IPv6 networks, the management aspects relating to transitioning require special attention as they are likely to be among the more dynamic over the period of IPv4/IPv6 interoperation and, importantly, have yet to be fully addressed. The paper introduces the site transitioning framework, which unifies a site's transitioning infrastructure under a single architecture in order to simplify its management and operation. We outline its design and operation, highlighting the advantages that this method would introduce. Finally, the STF concept is demonstrated using a case study of an IPv6 site based interoperation scenario.
本文概述了用一个专门支持IP转换的系统来补充当前IPv6网络管理工作的必要性。在未来很可能在任何IPv6网络中扮演重要角色,支持管理管理网络的过渡方面在其基础设施和服务提供方面至关重要。虽然IETF和其他机构正在开展有关IPv6网络管理的工作,但与过渡相关的管理方面需要特别注意,因为它们可能是IPv4/IPv6互操作期间更动态的,重要的是,尚未得到充分解决。本文介绍了站点过渡框架,它将站点的过渡基础设施统一在一个单一的架构下,以简化其管理和操作。我们概述了它的设计和操作,突出了该方法将引入的优点。最后,使用基于IPv6站点的互操作场景的案例研究演示了STF概念。
{"title":"IPv6 migration implications for network management - introducing the site transitioning framework (STF)","authors":"Michael Mackay, Christopher Edwards","doi":"10.1109/IPOM.2003.1251222","DOIUrl":"https://doi.org/10.1109/IPOM.2003.1251222","url":null,"abstract":"The paper outlines the need to supplement the current work on network management for IPv6 with a system specifically to support IP transitioning. As something that is likely to play a major role in any IPv6 network for the considerable future, support for managing the transitioning aspects of managed networks is vital in terms of their infrastructure and service provision. While there is work being carried out within the IETF and other bodies on the management of IPv6 networks, the management aspects relating to transitioning require special attention as they are likely to be among the more dynamic over the period of IPv4/IPv6 interoperation and, importantly, have yet to be fully addressed. The paper introduces the site transitioning framework, which unifies a site's transitioning infrastructure under a single architecture in order to simplify its management and operation. We outline its design and operation, highlighting the advantages that this method would introduce. Finally, the STF concept is demonstrated using a case study of an IPv6 site based interoperation scenario.","PeriodicalId":128315,"journal":{"name":"Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124788362","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
A data clustering algorithm for mining patterns from event logs 用于从事件日志中挖掘模式的数据聚类算法
Risto Vaarandi
Today, event logs contain vast amounts of data that can easily overwhelm a human. Therefore, mining patterns from event logs is an important system management task. The paper presents a novel clustering algorithm for log file data sets which helps one to detect frequent patterns from log files, to build log file profiles, and to identify anomalous log file lines.
今天,事件日志包含大量的数据,可以很容易地压倒一个人。因此,从事件日志中挖掘模式是一项重要的系统管理任务。本文提出了一种新的日志文件数据集聚类算法,该算法有助于从日志文件中检测频繁模式,建立日志文件概要,识别异常日志文件行。
{"title":"A data clustering algorithm for mining patterns from event logs","authors":"Risto Vaarandi","doi":"10.1109/IPOM.2003.1251233","DOIUrl":"https://doi.org/10.1109/IPOM.2003.1251233","url":null,"abstract":"Today, event logs contain vast amounts of data that can easily overwhelm a human. Therefore, mining patterns from event logs is an important system management task. The paper presents a novel clustering algorithm for log file data sets which helps one to detect frequent patterns from log files, to build log file profiles, and to identify anomalous log file lines.","PeriodicalId":128315,"journal":{"name":"Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)","volume":"187 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114183712","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 415
MobyDick FlowVis - using NeTraMet for distributed protocol analysis in a 4G network environment MobyDick FlowVis -在4G网络环境下使用netamet进行分布式协议分析
N. Brownlee, P. Christ, J. Jaehnert, Yongzheng Liang, K. Srinivasan, Jie Zhou
The commercial operation of future "4G" mobile wireless networks, comprising both IP-based voice and data uniformly, is widely considered as the next challenge for service providers. Within such an IP-environment, with its implicit integration of the control and data plane, passive measuring and metering will be one of the key elements for AAA and QoS provision, for performance and fault management purposes. Within the IETF, a real-time flow measurement framework has been developed for measurement and accounting for the fixed Internet infrastructure. The article first briefly introduces the IETF "real-time flow measurement" (RTFM) architecture, a pure IP 4G-architecture, together with its key signalling scenarios, and Java/J2EE and Web middleware technology. It then describes "FlowVis", a highly scalable and distributed IP based protocol visualization and verification framework for both signalling and data traffic. Combining the near-real-time capabilities of the existing IETF RTFM with current middleware technology, this "FlowVis" framework can serve as a starting point for distributed protocol analysis in future 4G networks. We use NeTraMet, an open-source implementation of the RTFM architecture as the key metering component of "Moby Dick", a 4G mobile access network architecture.
人们普遍认为,未来“4G”移动无线网络的商业运营将是服务提供商面临的下一个挑战,该网络将统一包含基于ip的语音和数据。在这样的ip环境中,由于控制和数据平面的隐式集成,被动测量和计量将成为AAA和QoS提供的关键元素之一,用于性能和故障管理目的。在IETF内部,已经开发了一个实时流量测量框架,用于测量和计算固定互联网基础设施。本文首先简要介绍了IETF“实时流量测量”(RTFM)体系结构(纯IP 4g体系结构)及其关键信令场景,以及Java/J2EE和Web中间件技术。然后介绍了“FlowVis”,这是一个高度可扩展和分布式的基于IP的协议可视化和验证框架,用于信令和数据流量。将现有IETF RTFM的近实时功能与当前的中间件技术相结合,这个“FlowVis”框架可以作为未来4G网络分布式协议分析的起点。我们使用nettramet, RTFM架构的开源实现,作为“白鲸”(Moby Dick) 4G移动接入网架构的关键计量组件。
{"title":"MobyDick FlowVis - using NeTraMet for distributed protocol analysis in a 4G network environment","authors":"N. Brownlee, P. Christ, J. Jaehnert, Yongzheng Liang, K. Srinivasan, Jie Zhou","doi":"10.1109/IPOM.2003.1251224","DOIUrl":"https://doi.org/10.1109/IPOM.2003.1251224","url":null,"abstract":"The commercial operation of future \"4G\" mobile wireless networks, comprising both IP-based voice and data uniformly, is widely considered as the next challenge for service providers. Within such an IP-environment, with its implicit integration of the control and data plane, passive measuring and metering will be one of the key elements for AAA and QoS provision, for performance and fault management purposes. Within the IETF, a real-time flow measurement framework has been developed for measurement and accounting for the fixed Internet infrastructure. The article first briefly introduces the IETF \"real-time flow measurement\" (RTFM) architecture, a pure IP 4G-architecture, together with its key signalling scenarios, and Java/J2EE and Web middleware technology. It then describes \"FlowVis\", a highly scalable and distributed IP based protocol visualization and verification framework for both signalling and data traffic. Combining the near-real-time capabilities of the existing IETF RTFM with current middleware technology, this \"FlowVis\" framework can serve as a starting point for distributed protocol analysis in future 4G networks. We use NeTraMet, an open-source implementation of the RTFM architecture as the key metering component of \"Moby Dick\", a 4G mobile access network architecture.","PeriodicalId":128315,"journal":{"name":"Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114804399","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
Performance of IP address fragmentation strategies for DDoS traceback DDoS溯源的IP地址分片策略性能
I. Hamadeh, G. Kesidis
Distributed denial-of-service (DDoS) attacks are among the most difficult and damaging security problems that the Internet currently faces. The component problems for an end-system that is the victim of a DDoS attack are: determining which incoming packets are part of the attack (intrusion detection); tracing back to find the origins of the attack (i.e., "traceback"); taking action to mitigate or stop the attack at the source by configuring firewalls or taking some kind of punitive measures. The preferable solution to these problems operates in real time so that a DDoS attack can be mitigated before the victim is seriously harmed. The paper focuses on the technique of packet marking/overloading for automated DDoS traceback which is a complex problem simply because attackers can use spoof source IP addresses in their attacking packets. A new packet marking strategy is proposed and is shown to yield better results in terms of complexity and performance.
分布式拒绝服务(DDoS)攻击是Internet当前面临的最困难和最具破坏性的安全问题之一。作为DDoS攻击受害者的终端系统的组件问题是:确定哪些传入数据包是攻击的一部分(入侵检测);追溯以找到攻击的起源(即“traceback”);采取行动,通过配置防火墙或采取某种惩罚性措施,从源头上减轻或阻止攻击。对于这些问题,最好的解决方案是实时运行,以便在受害者受到严重伤害之前减轻DDoS攻击。本文重点研究了自动DDoS溯源的数据包标记/过载技术,这是一个复杂的问题,因为攻击者可以在攻击数据包中使用欺骗的源IP地址。提出了一种新的数据包标记策略,并证明该策略在复杂度和性能方面都有较好的效果。
{"title":"Performance of IP address fragmentation strategies for DDoS traceback","authors":"I. Hamadeh, G. Kesidis","doi":"10.1109/IPOM.2003.1251217","DOIUrl":"https://doi.org/10.1109/IPOM.2003.1251217","url":null,"abstract":"Distributed denial-of-service (DDoS) attacks are among the most difficult and damaging security problems that the Internet currently faces. The component problems for an end-system that is the victim of a DDoS attack are: determining which incoming packets are part of the attack (intrusion detection); tracing back to find the origins of the attack (i.e., \"traceback\"); taking action to mitigate or stop the attack at the source by configuring firewalls or taking some kind of punitive measures. The preferable solution to these problems operates in real time so that a DDoS attack can be mitigated before the victim is seriously harmed. The paper focuses on the technique of packet marking/overloading for automated DDoS traceback which is a complex problem simply because attackers can use spoof source IP addresses in their attacking packets. A new packet marking strategy is proposed and is shown to yield better results in terms of complexity and performance.","PeriodicalId":128315,"journal":{"name":"Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)","volume":"61 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122561189","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 19
期刊
Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003) (IEEE Cat. No.03EX764)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1