Packet Sampling for Flow Accounting: Challenges and Limitations

  • Tanja Zseby
  • Thomas Hirsch
  • Benoit Claise
Part of the Lecture Notes in Computer Science book series (LNCS, volume 4979)

Abstract

We investigate the applicability of packet sampling techniques to flow-based accounting. First we show by theoretical considerations how the achievable accuracy depends on sampling techniques, parameters and traffic characteristics. Then we investigate empirically which accuracy is achieved with typical flow characteristics by experiments with real traffic traces from three different networks. In a third step we illustrate how to support sampling-based accounting by providing an accuracy statement together with the measured data. We show which information is required for this and how an accuracy assessment can be approximated from information available after the sampling process using information elements of the IP flow information export protocol (IPFIX).

Keywords

packet sampling accounting IPFIX 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    Duffield, N., Lund, C., Thorup, M.: Charging from Sampled Network Usage. In: ACM Internet Measurement Workshop IMW 2001, San Francisco, USA, November 1-2 (2001)Google Scholar
  2. 2.
    Estan, C., Varghese, G.: New Directions in Traffic Measurement and Accounting: Focusing on the Elephants, Ignoring the Mice. ACM Transactions on Computer Systems (August 2003)Google Scholar
  3. 3.
    Raspall, F., Sallent, S., Yufera, J.: Shared-state sampling. In: Proceedings of the 6th Internet Measurement Conference (IMC 2006), Rio de Janeriro, Brazil (2006)Google Scholar
  4. 4.
    Kodialam, M., Lakshman, T.V., Mohanty, S.: Runs bAsed Traffic Estimator (RATE): A Simple, Memory Efficient Scheme for Per-Flow Rate Estimation. In: IEEE INFOCOM 2004, Hong Kong (2004)Google Scholar
  5. 5.
  6. 6.
    Zseby, T., Molina, M., Duffield, N., Niccolini, S., Raspall, F.: Sampling and Filtering Techniques for IP Packet Selection. Internet Draft <draft-ietf-psamp-sample-tech-10.txt> (work in progress, June 2007)Google Scholar
  7. 7.
    Quittek, J., Zseby, T., Claise, B., Zander, S.: Requirements for IP Flow Information Export (IPFIX). In: RFC 3917 (October 2004)Google Scholar
  8. 8.
    Zseby, T.: Stratification Strategies for Sampling-based Non-intrusive Measurements of One-way Delay. In: Proceedings of Passive and Active Measurement Workshop (PAM 2003) April 6-8 (2003)Google Scholar
  9. 9.
    Cochran, W.G.: Stichprobenverfahren. Walter de Gruyter &Co, Berlin, New York (1972)MATHGoogle Scholar
  10. 10.
    Schwarz, H.: Stichprobenverfahren. Oldenbourg Verlag, GmbH (1975)Google Scholar
  11. 11.
    Quittek, J., Bryant, S., Claise, B., Aitken, P., Meyer, J.: Information Model for IP Flow Information Export. In: RFC 5102 (January 2008)Google Scholar
  12. 12.
    Claise, B. (ed.): Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of IP Traffic Flow Information. In: RFC 5101 (January 2008)Google Scholar
  13. 13.
    Dietz, T., Dressler, F., Carle, G., Claise, B., Aitken, P.: Information Model for Packet Sampling Exports, Internet-Draft draft-ietf-psamp-info-07.txt (work in progress, October 2007)Google Scholar
  14. 14.
    Waikato Internet Traffic Storage (WITS), http://wand.cs.waikato.ac.nz/wand/wits/
  15. 15.
    Fisz, M.: Probability Theory and Mathematical Statistics, 3rd edn. Robert E. Krieger Publishing Company Inc, Malabar, Florida (1963)MATHGoogle Scholar
  16. 16.
    Wentzel, E.S., Owtscharow, L.A.: Aufgabensammlung zur Wahrscheinlichkeitsrechnung. Akademieverlag, Berlin (1975)MATHGoogle Scholar
  17. 17.
    Centre Interuniversitaire de Ressources Informatiques de Lorraine (CIRIL), http://www.ciril.fr/

Copyright information

© Springer-Verlag Berlin Heidelberg 2008

Authors and Affiliations

  • Tanja Zseby
    • 1
  • Thomas Hirsch
    • 1
  • Benoit Claise
    • 2
  1. 1.Fraunhofer Institute FOKUSBerlinGermany
  2. 2.Cisco SystemsDiegemBelgium

Personalised recommendations