New directions in traffic measurement and accounting: Focusing on the elephants, ignoring the mice
ACM Transactions on Computer Systems (TOCS)
Proceedings of the 2004 conference on Applications, technologies, architectures, and protocols for computer communications
Understanding Internet traffic streams: dragonflies and tortoises
IEEE Communications Magazine
Passive measurement of one-way and two-way flow lifetimes
ACM SIGCOMM Computer Communication Review
Scalable flow-based networking with DIFANE
Proceedings of the ACM SIGCOMM 2010 conference
On the characteristics and reasons of long-lived internet flows
IMC '10 Proceedings of the 10th ACM SIGCOMM conference on Internet measurement
Inverting flow durations from sampled traffic
Proceedings of the 24th International Teletraffic Congress
| Hi-index | 0.00 |
We present measurements of stream lifetimes for Internet traffic on a backbone link in California and a university link in Auckland. We investigate the consequences of sampling techniques such as ignoring streams with six or fewer packets, since they usually account for less than 10% of the total bytes. We find that we often observe large bursts of small ‘attack' streams, which will diminish the integrity of strategies that ‘focus on the elephants'. Our observations further demonstrate the danger of traffic engineering approaches based on incorrect assumptions about the nature of the traffic.