Packet Sampling for Flow Accounting: Challenges and Limitations

  • Tanja Zseby
  • Thomas Hirsch
  • Benoit Claise
Conference paper

DOI: 10.1007/978-3-540-79232-1_7

Part of the Lecture Notes in Computer Science book series (LNCS, volume 4979)
Cite this paper as:
Zseby T., Hirsch T., Claise B. (2008) Packet Sampling for Flow Accounting: Challenges and Limitations. In: Claypool M., Uhlig S. (eds) Passive and Active Network Measurement. PAM 2008. Lecture Notes in Computer Science, vol 4979. Springer, Berlin, Heidelberg

Abstract

We investigate the applicability of packet sampling techniques to flow-based accounting. First we show by theoretical considerations how the achievable accuracy depends on sampling techniques, parameters and traffic characteristics. Then we investigate empirically which accuracy is achieved with typical flow characteristics by experiments with real traffic traces from three different networks. In a third step we illustrate how to support sampling-based accounting by providing an accuracy statement together with the measured data. We show which information is required for this and how an accuracy assessment can be approximated from information available after the sampling process using information elements of the IP flow information export protocol (IPFIX).

Keywords

packet sampling accounting IPFIX 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2008

Authors and Affiliations

  • Tanja Zseby
    • 1
  • Thomas Hirsch
    • 1
  • Benoit Claise
    • 2
  1. 1.Fraunhofer Institute FOKUSBerlinGermany
  2. 2.Cisco SystemsDiegemBelgium

Personalised recommendations