Time-Driven vs Packet-Driven: A Deep Study on Traffic Sampling

  • Xiaoxin Shao
  • Tao He
  • Shijin Kong
  • Changqing An
  • Xing Li
Conference paper
Part of the Lecture Notes in Computer Science book series (LNCS, volume 3961)

Abstract

Traffic sampling technology has been widely deployed in front of many high-speed network applications to alleviate the great pressure on packet capturing. Packet-driven sampling mechanism is believed better than time-driven one and no in-depth comparison is given to these two kinds of mechanisms. In this paper, a systematic comparison is conducted on three sampling methods, 1/N packet-driven, 1/T time-driven and t/T time-driven samplings, with a result showing that t/T sampling achieves similar accuracy as 1/N sampling in most aspects, and surpasses 1/N sampling in estimating the interval time distribution. Then we try to optimize performance of t/T sampling by tuning its parameters, and verify putative conclusions with both real and simulation traffic. The experiment in a real measurement application also indicates that these two kinds of sampling mechanisms achieve similar online estimation performance.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    Kimberly, C.C.: Internet Traffic Characterization. Ph.D Dissertation, University of California, San Diego, pp. 50–65 (1994)Google Scholar
  2. 2.
    Estan, C., Keys, K., Moore, D., Varghese, G.: Building a better netflow. In: Proceedings of the 2004 conference on Applications, technologies, architectures, and protocols for computer communications, pp. 245–256 (2004)Google Scholar
  3. 3.
    Estan, C., Varghese, G.: New directions in traffic measurement and accounting. In: Proceedings of the 2001 ACM SIGCOMM Internet Measurement Workshop, pp. 75–80 (2001)Google Scholar
  4. 4.
    Fraleigh, C., Diot, C., Lyles, B., Moon, S., et al.: Design and deployment of a passive monitoring infrastructure. In: Proceedings of the Thyrrhenian International Workshop on Digital Communications, pp. 556–575 (2001)Google Scholar
  5. 5.
    Duffield, N.G., Lund, C., Thorup, M.: Charging from sampled network usage. In: ACM SIGCOMM Internet Measurement Workshop, San Francisco, CA (2001)Google Scholar
  6. 6.
    He, G., Hou, J.C.: An In-Depth, Analytical Study of Sampling Techniques For Self-Similar Internet Traffic. To appear in the 25th International Conference on Distributed Computing Systems (ICDCS 2005), Columbus OH (2005)Google Scholar
  7. 7.
  8. 8.
    He, T., Liu, J., Kong, S.J., Shao, X.X., et al.: Generic Network Traffic Capture Platform building on Network Processor. Poster in IEEE INFOCOM 2005, Miami, USA (2005)Google Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2006

Authors and Affiliations

  • Xiaoxin Shao
    • 1
  • Tao He
    • 2
  • Shijin Kong
    • 1
  • Changqing An
    • 2
  • Xing Li
    • 1
  1. 1.Department of Electronic EngineeringTsinghua UniversityBeijingP.R. China
  2. 2.China Education and Research NetworkBeijingP.R. China

Personalised recommendations