Abstract
Traffic repositories with TCP/IP header information are very important for network analysis. Researchers often assume that such repositories reliably represent all traffic that has been flowing over the network; little thoughts are made regarding the consistency of these repositories. Still, for various reasons, the traffic capturing process may have missed packets. For certain kinds of analysis, for example loss measurements, such inconsistencies may lead to the wrong conclusions.
This paper proposes an algorithm to detect such inconsistencies, using the idea of “fake gaps”. A prototype has been developed, and used to test two well-known repositories: the WIDE and Simpleweb repositories. The paper shows that both repositories contain several inconsistencies.
Chapter PDF
References
Timmer, M.: How to identify the speed limiting factor of a TCP flow, http://dacs.ewi.utwente.nl/assignments/completed/bachelor/reports/B-assignment_Timmer.pdf (retrieved October 5, 2008)
Slomp, G.: Consistency of repositories. Presented at: 8th TSConIT, http://referaat.cs.utwente.nl/new/paper.php?paperID=377 (retrieved October 5, 2008)
Lastdrager, E.E.H.: Consistency analysis of network traffic repositories. Presented at: 10th TSConIT, http://referaat.cs.utwente.nl/new/paper.php?paperID=464 (retrieved February 20, 2009)
van de Meent, R., Pras, A.: Simpleweb/University of Twente – Traffic Measurement Data Repository, http://traces.simpleweb.org (retrieved October 5, 2008)
Cho, K., Mitsuya, K., Kato, A.: Traffic data repository at the WIDE project. In: Proc. USENIX Annual Technical Conference, p. 51 (2000)
Lastdrager, E.E.H.: Prototype and results, http://www.vf.utwente.nl/~lastdragereeh/referaat
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2009 IFIP International Federation for Information Processing
About this paper
Cite this paper
Lastdrager, E., Pras, A. (2009). Consistency of Network Traffic Repositories: An Overview. In: Sadre, R., Pras, A. (eds) Scalability of Networks and Services. AIMS 2009. Lecture Notes in Computer Science, vol 5637. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-02627-0_15
Download citation
DOI: https://doi.org/10.1007/978-3-642-02627-0_15
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-02626-3
Online ISBN: 978-3-642-02627-0
eBook Packages: Computer ScienceComputer Science (R0)