Packet sampling for flow accounting: challenges and limitations

  • Authors:
  • Tanja Zseby;Thomas Hirsch;Benoit Claise

  • Affiliations:
  • Fraunhofer Institute FOKUS, Berlin, Germany;Fraunhofer Institute FOKUS, Berlin, Germany;Cisco Systems, Diegem, Belgium

  • Venue:
  • PAM'08 Proceedings of the 9th international conference on Passive and active network measurement
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

We investigate the applicability of packet sampling techniques to flow-based accounting. First we show by theoretical considerations how the achievable accuracy depends on sampling techniques, parameters and traffic characteristics. Then we investigate empirically which accuracy is achieved with typical flow characteristics by experiments with real traffic traces from three different networks. In a third step we illustrate how to support sampling-based accounting by providing an accuracy statement together with the measured data. We show which information is required for this and how an accuracy assessment can be approximated from information available after the sampling process using information elements of the IP flow information export protocol (IPFIX).