Abstract
CoMo (Continuous Monitoring) is a passive monitoring system. CoMo has been designed to be the basic building block of an open network monitoring infrastructure that would allow researchers and network operators to easily process and share network traffic statistics over multiple sites. This paper identifies the challenges that lie ahead in the deployment of such an open infrastructure. These main challenges are: (1) the system must allow any arbitrary traffic metric to be extracted from the packet streams, (2) it must provide privacy and security guarantees to the owner of the monitored link, the network users and the CoMo users, and (3) it must be robust to anomalous traffic patterns or traffic query loads. We describe the high-level architecture of CoMo and, in greater detail, the resource management, query processing and security aspects.
(Invited Paper)
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
A. R. Bharambe, M. Agrawal, and S. Seshan. Mercury: Supporting scalable multi-attribute range queries. In Proceedings of ACM Sigcomm, Sept. 2004.
CAIDA: Cooperative Association for Internet Data Analysis. http://www.caida.org.
D. Carney et al. Monitoring streams-a new class of data management applications. In Proceedings of VLDB, 2002.
S. Chandrasekaran et al. TelegraphCQ: Continuous dataflow processing of an uncertain world. In Proceedings of CIDR, 2003.
Cisco Systems. NetFlow services and applications. White Paper, 2000.
C. Cranor, T. Johnson, O. Spataschek, and V. Shkapenyuk. Gigascope: A stream database for network applications. In Proceedings of ACM Sigmod, June 2003.
Endace. http://www.endace.com.
C. Fraleigh, S. Moon, B. Lyles, C. Cotton, M. Khan, R. Rockell, D. Moll, T. Seely, and C. Diot. Packet-level traffic measurements from the Sprint IP backbone. IEEE Network, 2003.
GEANT. http://www.dante.net.
P. B. Gibbons, B. Karp, Y. Ke, S. Nath, and S. Seshan. IrisNet: An architecture for a world-wide sensor web. IEEE Pervasive Computing, 2(4), Oct.
R. Huebsch, J. M. Hellerstein, N. Lanham, B. T. Loo, S. Shenker, and I. Stoica. Querying the Internet with PIER. In Proceedings of VLDB, 2003.
L. Huston, R. Sukthankar, R. Wickremesinghe, M. Stayanarayanan, G. Ganger, E. Riedel, and A. Ailamaki. Diamond: A storage architecture for early discard in interactive search. In Usenix FAST, Mar. 2004.
Internet2. http://www.internet2.org.
IP Flow Information eXport Working Group. Internet Engineering Task Force. http://www.ietf.org/html.charters/ipfix-charter.html.
X. Li, Y. J. Kim, R. Govindan, and W. Hong. Multi-dimensional range queries in sensor networks. In Proceedings of the ACM Sensys, Nov. 2003.
S. McCanne and V. Jacobson. The BSD Packet Filter: A new architecture for user-level packet capture. In USENIX Winter, Jan. 1993.
A. Moore, J. Hall, E. Harris, C. Kreibech, and I. Pratt. Architecture of a network monitor. In Proceedings of Passive and Active Measurement Workshop, Apr. 2003.
NLANR: National Laboratory for Applied Network Research. http://www.nlanr.net.
S. Patarin and M. Makpangou. Pandora: A flexible network monitoring platform. In Usenix, 2000.
V. Paxson, J. Mahdavi, A. Adams, and M. Mathis. An architecture for large-scale internet measurement. IEEE Communications, 36(8), 1998.
RIPE Rèseaux IP Europèens. http://www.ripe.net.
tcpdump/libpcap. http://www.tcpdump.org.
University of Oregon Route Views Project, http://www.routeviews.org.
J. Xu, J. Fan, M. Ammar, and S. Moon. Prefix-preserving IP address anonymization: Measurement-based security evaluation and a new cryptography-based scheme. Nov. 2002.
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2006 Springer Science+Business Media, Inc.
About this paper
Cite this paper
Iannaccone, G., Diot, C. (2006). The CoMo Project: Towards A Community-Oriented Measurement Infrastructure. In: Davoli, F., Palazzo, S., Zappatore, S. (eds) Distributed Cooperative Laboratories: Networking, Instrumentation, and Measurements. Signals and Communication Technology. Springer, Boston, MA. https://doi.org/10.1007/0-387-30394-4_8
Download citation
DOI: https://doi.org/10.1007/0-387-30394-4_8
Publisher Name: Springer, Boston, MA
Print ISBN: 978-0-387-29811-5
Online ISBN: 978-0-387-30394-9
eBook Packages: EngineeringEngineering (R0)