Exploiting packet sampling measurements for traffic characterization and classification

Abstract :

The use of packet sampling for traffic measurement has become mandatory for network operators to cope with the huge amount of data transmitted in nowadays networks, powered by increasingly faster transmission technologies. Therefore, many networking tasks must already deal with such reduced data, more available but less rich in information. In this work we assess the impact of packet sampling on various network monitoring activities, with a particular focus on traffic characterization and classification. We process an extremely heterogeneous dataset composed of four packet level traces (representative of different access technologies and operational environments) with a traffic monitor able to apply different sampling policies and rates to the traffic and extract several features both in aggregated and per-flow fashion, providing empirical evidences of the impact of packet sampling on both traffic measurement and traffic classification. First, we analyze feature distortion, quantified by means of two statistical metrics: most features appear already deteriorated under low sampling step, no matter the sampling policy, while only a few remain consistent under harsh sampling conditions, which may even cause some artifacts undermining the correctness of measurements. Second, we evaluate the performance of traffic classification under sampling. The information content of features, even though deteriorated, still allows a good classification accuracy, provided that the classifier is trained with data obtained at the same sampling rate of the target data. The accuracy is also due to a thoughtful choice of a smart sampling policy which biases the sampling towards packets carrying the most useful information.

Keywords : Traffic measurement
Type de document :
Article dans une revue
International Journal of Network Management, Wiley, 2012, 22 (6), pp.451-476. 〈10.1002/nem.1802〉
Liste complète des métadonnées

https://hal-imt.archives-ouvertes.fr/hal-00786142
Contributeur : Admin Télécom Paristech <>
Soumis le : jeudi 7 février 2013 - 17:56:55
Dernière modification le : mardi 24 avril 2018 - 13:51:28

Lien texte intégral

Identifiants

Citation

D. Tammaro, S. Valenti, D. Rossi, A. Pescape. Exploiting packet sampling measurements for traffic characterization and classification. International Journal of Network Management, Wiley, 2012, 22 (6), pp.451-476. 〈10.1002/nem.1802〉. 〈hal-00786142〉

Partager

Métriques

Consultations de la notice

269