The strict avalanche criterion: spectral properties of boolean functions and an extended definition
CRYPTO '88 Proceedings on Advances in cryptology
Application of sampling methodologies to network traffic characterization
SIGCOMM '93 Conference proceedings on Communications architectures, protocols and applications
Measurements and analysis of end-to-end Internet dynamics
Measurements and analysis of end-to-end Internet dynamics
Trajectory sampling for direct traffic observation
IEEE/ACM Transactions on Networking (TON)
Towards improving packet probing techniques
IMW '01 Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement
IEEE/ACM Transactions on Networking (TON)
MMH: Software Message Authentication in the Gbit/Second Rates
FSE '97 Proceedings of the 4th International Workshop on Fast Software Encryption
The strict avalanche criterion randomness test
Mathematics and Computers in Simulation
Practical delay monitoring for ISPs
CoNEXT '05 Proceedings of the 2005 ACM conference on Emerging network experiment and technology
Understanding network delay changes caused by routing events
Proceedings of the 2007 ACM SIGMETRICS international conference on Measurement and modeling of computer systems
Evaluation of header field entropy for hash-based packet selection
PAM'08 Proceedings of the 9th international conference on Passive and active network measurement
Empirical Evaluation of Hash Functions for PacketID Generation in Sampled Multipoint Measurements
PAM '09 Proceedings of the 10th International Conference on Passive and Active Network Measurement
High-speed per-flow traffic measurement with probabilistic multiplicity counting
INFOCOM'10 Proceedings of the 29th conference on Information communications
Multi-hop packet tracking for experimental facilities
Proceedings of the ACM SIGCOMM 2010 conference
Non-crypto Hardware Hash Functions for High Performance Networking ASICs
Proceedings of the 2011 ACM/IEEE Seventh Symposium on Architectures for Networking and Communications Systems
Hi-index | 0.00 |
A broad spectrum of network measurement applications demand passive multipoint measurements in which data from multiple observation points has to be correlated. Examples are the passive measurement of one-way delay or the observation of the path that a packet takes through a network. Nevertheless, due to high data rates and the need for fine granular measurements, the resource consumption for passive measurements can be immense. Furthermore, the resource consumption depends on the traffic in the network, which usually is highly dynamic. Packet and flow-selection methods provide a solution to reduce and control the resource consumption for passive measurements. In order to apply such techniques to multipoint measurements the selection processes need to be synchronized. Hash-based selection is a deterministic packet selection based on a hash function computed on selected parts of the packet content. This selection decision is consistent throughout the network and enables packet tracing and the measurement of delay between network nodes. Because the selection is based on deterministic function it can introduce bias which leads to wrong estimation of traffic characteristics. In this paper we define a set of quality criteria and select methods to investigate which hash function is most suitable for hash-based packet selection. We analyze 23 non-cryptographic and 2 cryptographic hash functions. Experiments are performed with real traffic traces from different networks. Based on the results we recommend 2 fast hash functions which show low bias and sample a representative subset of the population.