An analysis of longitudinal TCP passive measurements

Authors:
Kensuke Fukuda
Affiliations:
National Institute of Informatics, Japan / PRESTO JST
Venue:
TMA'11 Proceedings of the Third international conference on Traffic monitoring and analysis
Year:
2011

Citing 10
Cited 1

Passive estimation of TCP round-trip times

ACM SIGCOMM Computer Communication Review
Statistical analysis of malformed packets and their origins in the modern internet

Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment
Longitudinal study of Internet traffic in 1998-2003

WISICT '04 Proceedings of the winter international synposium on Information and communication technologies
An analysis of TCP reset behaviour on the internet

ACM SIGCOMM Computer Communication Review
A Longitudinal Study of P2P Traffic Classification

MASCOTS '06 Proceedings of the 14th IEEE International Symposium on Modeling, Analysis, and Simulation
A brief history of scanning

Proceedings of the 7th ACM SIGCOMM conference on Internet measurement
Extracting hidden anomalies using sketch and non Gaussian multiresolution statistical detection procedures

Proceedings of the 2007 workshop on Large scale attack defense
Trace driven analysis of the long term evolution of Gnutella peer-to-peer traffic

PAM'07 Proceedings of the 8th international conference on Passive and active network measurement
Trends and differences in connection-behavior within classes of internet backbone traffic

PAM'08 Proceedings of the 9th international conference on Passive and active network measurement
MAWILab: combining diverse anomaly detectors for automated anomaly labeling and performance benchmarking

Proceedings of the 6th International COnference

Multipath in the middle(box)

Proceedings of the 2013 workshop on Hot topics in middleboxes and network function virtualization

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper reports on the longitudinal dynamics of TCP flows at an international backbone link over the period from 2001 to 2010. The dataset was a collection of traffic traces called MAWI data consisting of daily 15min pcap traffic trace measured at a trans-pacific link between Japan and the US. The environment of the measurement link has changed in several aspects (i.e., congestion, link upgrade, application). The main findings of the paper are as follows. (1) A comparison of the AS-level delays between 2001 and 2010 shows that the mean delay decreased in 55% of ASes, but the median value increased. Moreover, largely inefficient paths disappeared. (2) The deployment of TCP SACK increased from 10% to 90% over the course of 10 years. On the other hand, the window scale and timestamp options remained under-deployed (less than 50%).