TMA portal

In network monitoring, the simplest form of overload management consists of discarding packets without control in the presence of overload. This naive approach is still adopted by most monitoring applications, although it is known to have a severe (and unpredictable) impact on the accuracy and effectiveness of these applications.

In order to minimize this impact, critical monitoring systems often integrate specialized hardware (e.g., DAG cards, SCAMPI adapters, router add-ons, network processors [Wolf et al., 2006] or make use of ad-hoc configurations (e.g. [Schneider et al., 2007]) to avoid the inherent hardware limitations of the PC-based architecture for network monitoring [Iannaccone et al., 2001],  [Agarwal et al., 2003]. Although these solutions have demonstrated their effectiveness in some scenarios, they present scalability issues that make them viable only as a short-term solution.

Other monitoring systems have opted to significantly reduce their online functionalities in order to operate in high-speed environments (e.g., OC3MON [Apisdorf et al., 1996], Sprint IPMON [Fraleigh et al., 2003]). In this case, complex traffic analysis computations are postponed to an offline stage.

References

• [conf-lisa-ApisdorfCTW96] bibtex
  J. Apisdorf, K. C. Claffy, K. Thompson, and R. Wilder, "OC3MON: Flexible, Affordable, High Performance Staistics Collection.," in LISA, 2004-10-26 1996, pp. 97-112.
  Visit
  @inproceedings{conf/lisa/ApisdorfCTW96, added-at = {2004-10-26T00:00:00.000+0200},
  author = {Apisdorf, Joel and Claffy, Kimberly C. and Thompson, Kevin and Wilder, Rick},
  biburl = {http://www.bibsonomy.org/bibtex/2ada7208febc6fc6e851edb3aa16f4771/dblp},
  booktitle = {LISA},
  crossref = {conf/lisa/1996},
  date = {2004-10-26},
  description = {dblp},
  ee = {http://www.usenix.org/publications/library/proceedings/lisa96/kc.html},
  interhash = {d5e9a69e781a9f864a579a94d2da6cb7},
  intrahash = {ada7208febc6fc6e851edb3aa16f4771},
  isbn = {1-880446-81-2},
  keywords = {dblp},
  pages = {97-112},
  publisher = {USENIX},
  timestamp = {2004-10-26T00:00:00.000+0200},
  title = {OC3MON: Flexible, Affordable, High Performance Staistics Collection.},
  url = {http://dblp.uni-trier.de/db/conf/lisa/lisa1996.html#ApisdorfCTW96},
  year = 1996 }

• [conf-imw-IannacconeDGM01] bibtex
  G. Iannaccone, C. Diot, I. Graham, and N. McKeown, "Monitoring very high speed links.," in Internet Measurement Workshop, 2005-02-24 2001, pp. 267-271.
  Visit
  @inproceedings{conf/imw/IannacconeDGM01, added-at = {2005-02-24T00:00:00.000+0100},
  author = {Iannaccone, Gianluca and Diot, Christophe and Graham, Ian and McKeown, Nick},
  biburl = {http://www.bibsonomy.org/bibtex/2fe2c8cec163470b55000eab39bc535e8/dblp},
  booktitle = {Internet Measurement Workshop},
  crossref = {conf/imw/2001},
  date = {2005-02-24},
  description = {dblp},
  editor = {Paxson, Vern},
  ee = {http://doi.acm.org/10.1145/505202.505235},
  interhash = {60a8fdee30beb5d7737cc1f48340b1d9},
  intrahash = {fe2c8cec163470b55000eab39bc535e8},
  isbn = {1-58113-435-5},
  keywords = {dblp},
  pages = {267-271},
  publisher = {ACM},
  timestamp = {2005-02-24T00:00:00.000+0100},
  title = {Monitoring very high speed links.},
  url = {http://dblp.uni-trier.de/db/conf/imw/imw2001.html#IannacconeDGM01},
  year = 2001 }

• [conf-pam-SchneiderWF07] bibtex
  F. Schneider, J. Wallerich, and A. Feldmann, "Packet Capture in 10-Gigabit Ethernet Environments Using Contemporary Commodity Hardware.," in PAM, 2007-07-10 2007, pp. 207-217.
  Visit
  @inproceedings{conf/pam/SchneiderWF07, added-at = {2007-07-10T00:00:00.000+0200},
  author = {Schneider, Fabian and Wallerich, Jörg and Feldmann, Anja},
  biburl = {http://www.bibsonomy.org/bibtex/20f1598aff25f4f343caff751b18498b6/dblp},
  booktitle = {PAM},
  crossref = {conf/pam/2007},
  date = {2007-07-10},
  description = {dblp},
  editor = {Uhlig, Steve and Papagiannaki, Konstantina and Bonaventure, Olivier},
  ee = {http://dx.doi.org/10.1007/978-3-540-71617-4_21},
  interhash = {97e389d7d23c07c9201370fab1ed77b7},
  intrahash = {0f1598aff25f4f343caff751b18498b6},
  isbn = {978-3-540-71616-7},
  keywords = {dblp},
  pages = {207-217},
  publisher = {Springer},
  series = {Lecture Notes in Computer Science},
  timestamp = {2007-07-10T00:00:00.000+0200},
  title = {Packet Capture in 10-Gigabit Ethernet Environments Using Contemporary Commodity Hardware.},
  url = {http://dblp.uni-trier.de/db/conf/pam/pam2007.html#SchneiderWF07},
  volume = 4427, year = 2007 }

• [conf-mascots-WolfRBY06] bibtex
  T. Wolf, R. Ramaswamy, S. Bung, and N. Yang, "An Architecture for Distributed Real-Time Passive Network Measurement.," in MASCOTS, 2007-01-05 2006, pp. 335-344.
  Visit
  @inproceedings{conf/mascots/WolfRBY06, added-at = {2007-01-05T00:00:00.000+0100},
  author = {Wolf, Tilman and Ramaswamy, Ramaswamy and Bung, Siddhartha and Yang, Ning},
  biburl = {http://www.bibsonomy.org/bibtex/23e8ccefe7f59b15e929aa3a017fe05b2/dblp},
  booktitle = {MASCOTS},
  crossref = {conf/mascots/2006},
  date = {2007-01-05},
  description = {dblp},
  ee = {http://doi.ieeecomputersociety.org/10.1109/MASCOTS.2006.11},
  interhash = {90ea80cd8f9be575e4d1c1ab6ea0047d},
  intrahash = {3e8ccefe7f59b15e929aa3a017fe05b2},
  isbn = {0-7695-2573-3},
  keywords = {dblp},
  pages = {335-344},
  publisher = {IEEE Computer Society},
  timestamp = {2007-01-05T00:00:00.000+0100},
  title = {An Architecture for Distributed Real-Time Passive Network Measurement.},
  url = {http://dblp.uni-trier.de/db/conf/mascots/mascots2006.html#WolfRBY06},
  year = 2006 }

• D. Agarwal, J. M. González, G. Jin and B. Tierney. An Infrastructure for Passive Network Monitoring of Application Data Streams. In Proc. of Passive and Active Measurement Conf., 2003

• C. Fraleigh, S. Moon, B. Lyles, C. Cotton, M. Khan, D. Moll, R. Rockell, T. Seely and C. Diot. Packet-level traffic measurements from the Sprint IP backbone. IEEE Network, 2003.