Abstract
Internet traffic analysis is one of the core topics of research in the evolution and planning of the next generation integrated networks. In spite of this fact, standard, open source tools for the collection and, most of all, the elaboration of traffic data are very few and far from comprehensive and easy to use. This paper present a new tool named Tstat, that allows the collection of traffic data and is able to reconstruct the traffic characteristics at several different logical level, from the packet level up to the application level. Tstat is made available to the scientific and industrial community 1 and, as of today, offer more than 80 different types of measurements, starting from classical traffic volume measurements, up to sophisticated analysis regarding the round trip times measured by TCP or the loss probability and correlation of each flow.
One of the key characteristics of Tstat is that, though it is capable of analyzing the traffic at the flow level, it is an entirely passive tool, that does not alter in any way the traffic pattern at the network interface where its data collection module is installed.
This work was supported by the Italian Ministry for University and Scientific Research through the PLANET-IP Project.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Mellia, M., Carpani, A., Lo Cigno, R.: Tstat web page. http://tstat.tlc.polito.it/ (2001)
Paxson, V., Floyd, S.: Wide-Area Traffic: The Failure of Poisson Modeling. IEEE/ACM Transactions on Networking 3 (1995) 226–244
Crovella, M.E., Bestavros, A.: Self Similarity inWorldWideWeb Traffic: Evidence and Possible Causes. IEEE/ACM Transactions on Networking 5 (1997) 835–846
Paxson, V.: End-to-end routing behavior in the Internet. IEEE/ACM Transactions on Networking 5 (1997) 601–615
Caceres, R., Danzig, P., Jamin, S., Mitzel, D.: Characteristics of Wide-Area TCP/IP Conversations. ACM SIGCOMM’ 91 (1991)
Danzig, P., Jamin, S.: tcplib: A library of TCP Internetwork Traffic Characteristics. USC Technical report (1991)
Danzig, P., Jamin, S., Caceres, R., Mitzel, D., Mestrin, D.: An EmpiricalWorkload Model for Driving Wide-Area TCP/IP Network Simulations. Internetworking: Research and Experience 3 (1992) 1–26
Paxons, V.: Empirically Derived AnalyticModels ofWide-Area TCP Connections. IEEE/ACM Transactions on Networking 2 (1994) 316–336
Duska, B.M., Marwood, D., Feeley, M.J.: The Measured Access Characteristics of World-Wide-Web Client Proxy Caches. USENIX Symposium on Internet Technologies and Systems (1997) 23–36
Fan, L., Cao, P., Almeida, J., Broder, A.: Summary Cache: A Scalable Wide-Area Web Cache Sharing Protocol. ACM SIGCOMM’ 98 (1998) 254–265
Feldmann, A., Caceres, R., Douglis, F., Glass, G., Rabinovich, M.: Performance of Web Proxy Caching in Heterogeneous Bandwidth Environments. IEEE INFOCOM’ 99 (1999) 107–116
Mah, B.: An Empirical Model of HTTP Network Traffic. IEEE INFOCOM’ 97 (1997)
Balakrishnan, H., Stemm, M., Seshan, S., Padmanabhan, V., Katz, R.H.: TCP Behavior of a Busy Internet Server: Analysis and Solutions. IEEE INFOCOM’ 98 (1998) 252–262
Cleveland, W.S., LinD, D., Sun, X.: IP Packet Generation: Statistical Models for TCP Start Times Based on Connection-Rate Superposition. ACM SIGMETRICS 2000 (2000) 166–177
Smith, F.D., Hernandez, F., Jeffay, K., Ott, D.: What tcp/ip protocol headers can tell us about the web. ACM SIGMETRICS’ 01 (2001) 245–256
Padhye, J., Floyd, S.: On inferring tcp behavior. ACM SIGCOMM 2001, San Diego, California, USA (2001)
McCanne, S., Leres, C., Jacobson, V.: libpcap. http://www.tcpdump.org (2001)
McCanne, S., Leres, C., Jacobson, V.: Tcpdump. http://www.tcpdump.org (2001)
Ostermann, S.: tcptrace (2001) Version 5.2.
Deri, L., Suin, S.: Effective traffic measurement using ntop. IEEE Communications Magazine 38 (2000) 138–143
Postel, J.: RFC 791: Internet Protocol (1981)
Postel, J.: RFC 793: Transmission control protocol (1981)
Allman, M., Paxson, V., Stevens, W.: RFC 2581: TCP Congestion Control (1999)
Iannaccone, G., Diot, C., Graham, I., McKeown, N.: Monitoring very high speed links. ACM Internet Measurement Workshop, San Francisco (2001)
Mathis, M., Madhavi, J., Floyd, S., Romanow, A.: RFC 2018: TCP Selective Acknowledgment Options (1996)
Jacobson, V., Braden, R., Borman, D.: RFC 1323: TCP extensions for high performance (1992)
Postel, J.: RFC 879: The TCP Maximum Segment Size and Related Topics (1983)
GARR: GARR-The Italian Academic and Research Network. http://www.garr.it/garr-b-home-engl.shtml (2001)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2003 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Mellia, M., Carpani, A., Lo Cigno, R. (2003). TStat: TCP STatistic and Analysis Tool. In: Marsan, M.A., Corazza, G., Listanti, M., Roveri, A. (eds) Quality of Service in Multiservice IP Networks. QoS-IP 2003. Lecture Notes in Computer Science, vol 2601. Springer, Berlin, Heidelberg. https://doi.org/10.1007/3-540-36480-3_11
Download citation
DOI: https://doi.org/10.1007/3-540-36480-3_11
Published:
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-00604-6
Online ISBN: 978-3-540-36480-1
eBook Packages: Springer Book Archive