Synchronizing management information using traffic pattern matching technique
This presentation is the property of its rightful owner.
Sponsored Links
1 / 20

Synchronizing Management Information using Traffic Pattern Matching Technique PowerPoint PPT Presentation


  • 47 Views
  • Uploaded on
  • Presentation posted in: General

Synchronizing Management Information using Traffic Pattern Matching Technique. Kohei Ohta, Yohsuke Takei, Nei Kato, Glenn Mansfield, Yoshiaki Nemoto C yber S olutions Inc., Tohoku University SPECTS’99, July 11-16, 1999. outline. background recent environment Internet measurement

Download Presentation

Synchronizing Management Information using Traffic Pattern Matching Technique

An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -

Presentation Transcript


Synchronizing management information using traffic pattern matching technique

Synchronizing Management Informationusing Traffic Pattern Matching Technique

Kohei Ohta, Yohsuke Takei, Nei Kato, Glenn Mansfield, Yoshiaki Nemoto

Cyber Solutions Inc., Tohoku University

SPECTS’99, July 11-16, 1999


Outline

outline

  • background

    • recent environment

  • Internet measurement

    • black box in the measurement

  • approach with pattern match technique

    • traffic characteristics at a border of network

    • incoming/outgoing traffic characteristics

  • evaluation

    • sample application

  • conclusion


Background

background

  • Internet traffic measurement

    • effective operation

    • management and analysis

      • planning networks

      • managing QoS, ….

  • Efforts

    • IETF-WG

      • IPPM, RTFM, SNMP(RMON, DISMAN)

    • Research

      • NIMI, INI, so many measurement research and tools


Measurement the internet

Delay

Throughput

Congestion

host A

:

measurement the Internet

server B

  • TRAFFIC

    • accounting

    • policing

    • shaping

  • who is speaking?

  • where is congested?

  • how far to the servers?

router

network A

probe

server A


Issues on high speed network measurement

issues on high-speed network measurement

  • a large amount of traffic

    • difficult for exhaustive examination

  • rapid changing situation

    • the event handling is time sensitive

  • widely distributed

    • difficult to observe from one point


Points of observation

centralized

distributed

points of observation

  • points of observation

    • Interfaces of network devices

    • probing shared media

      • traditional Ethernet, FDDI/CDDI,…

    • remote monitoring

      • remote management, DISMAN, RMON

  • range of observation

    • inside LAN

    • large scale backbone network

    • end-to-end across global Internet

local area

wide area


Synchronization issue

synchronization issue

  • What is synchronization?

    • information correlation observed at different independent point

  • Why synchronize?

    • all network activities are related each other

    • to know the picture of global behavior

  • How to synchronize?

    • NTP, GPS


Black box in the measurement

black box in the measurement

How to synchronize?


What is traffic pattern

what is traffic pattern?

related activity?

network


Modeling the traffic pattern

modeling the traffic pattern

traffic transition vector


Similarity evaluation

similarity evaluation

correlation coefficient (rij)

between incoming and outgoing traffic


Experimental environment

experimental environment

  • two types of operational network

    • 100Mbps FDDI backbone network

      • providing connectivity to some big universities, colleges, and museums

      • over 20 organizations connected

    • 10Mbps Ethernet Internet-eXchange,

      • providing connectivity to 5 commercial ISPs.


Data for evaluation

data for evaluation

  • whole traffic data from the operational network

  • traffic data of each observation point derived from whole traffic

  • comparing the simulated data with original whole traffic data


Overall evaluation

overall evaluation

  • comparison between logged data and calculated data

the best case with exact match

(most strict evaluation)


Sample synchronization result

sample synchronization result

mismatching


What is the traffic in the network

what is the traffic in the network

LiI is amount of synchronizedincoming traffic via link i


Who is using the bandwidth

who is using the bandwidth


Traffic matrix in switching hub

traffic MATRIXin switching HUB

  • 100M Ethernet SW-HUB

  • 24-ports

  • Access method

    • SNMPv1

  • MIB object

    • ifInUcastPkts

    • ifOutUcastPkts

  • Polling Interval: 10sec.


Considerations

considerations

  • Good points

    • suitable for high-speed network

    • small resources needed

    • within well-standardized framework, e.g. SNMP

    • no new additional equipment needed.

  • Limitations

    • only for small delay network

    • result is just estimation

    • difficult to apply to homogeneous network


Conclusion

conclusion

  • On traffic measurement issues:

    • point out the strong requirement in case of high-speed network measurement in distributed manner.

    • proposed a novel idea to synchronize the traffic information observed at different independent points, which use traffic pattern match technique.

    • show the experimental result and sample application with this proposed technique.


  • Login