Experiences with a Continuous Network Tracing Infrastructure

Experiences with a Continuous Network Tracing Infrastructure

Hussain, Alefiya and Bartlett, Genevieve and Pryadkin, Yuri and Heidemann, John and Papadopoulos, Christos and Bannister, Joseph
USC/Information Sciences Institute

Alefiya Hussain, Genevieve Bartlett, Yuri Pryadkin, John Heidemann, Christos Papadopoulos and Joseph Bannister 2005. Experiences with a Continuous Network Tracing Infrastructure. Technical Report ISI-TR-2005-601. USC/Information Sciences Institute.

Abstract

One of the most pressing problems in network research is the lack of long-term trace data from ISPs. The Internet carries an enormous volume and variety of data; mining this data can provide valuable insight into the design and development of new protocols and applications. Although capture cards for high-speed links exist today, actually making the network traffic available for analysis involves more than just getting the packets off the wire, but also handling large and variable traffic loads, sanitizing and anonymizing the data, and coordinating access by multiple users. In this paper we discuss the requirements, challenges, and design of an effective traffic monitoring infrastructure for network research. We describe our experience in deploying and maintaining a multi-user system for continuous trace collection at a large regional ISP. We evaluate the performance of our system and show that it can support sustained collection and processing rates of over 160–300Mbits/s.

Reference

@techreport{Hussain05a,
  author = {Hussain, Alefiya and Bartlett, Genevieve and Pryadkin, Yuri and Heidemann, John and Papadopoulos, Christos and Bannister, Joseph},
  title = {Experiences with a Continuous Network Tracing Infrastructure},
  institution = {USC/Information Sciences Institute},
  year = {2005},
  sortdate = {2005-04-01},
  project = {ant, lacrend, lander},
  jsubject = {chronological},
  number = {ISI-TR-2005-601},
  month = apr,
  location = {johnh: pafile},
  keywords = {network trace collection},
  url = {http://www.isi.edu/%7ejohnh/PAPERS/Hussain04a.html},
  pdfurl = {http://www.isi.edu/%7ejohnh/PAPERS/Hussain04a.pdf},
  myorganization = {USC/Information Sciences Institute},
  copyrightholder = {authors}
}