Edge-to-edge measurement-based distributed network monitoring

Authors:
Ahsan Habib;Maleq Khan;Bharat Bhargava
Affiliations:
Department of Computer Sciences, Center for Education and Research in Information, Assurance and Security ( CERIAS), Purdue University, West Lafayette, IN;Department of Computer Sciences, Center for Education and Research in Information, Assurance and Security ( CERIAS), Purdue University, West Lafayette, IN;Department of Computer Sciences, Center for Education and Research in Information, Assurance and Security ( CERIAS), Purdue University, West Lafayette, IN
Venue:
Computer Networks: The International Journal of Computer and Telecommunications Networking
Year:
2004

Citing 19
Cited 9

Measurements and analysis of end-to-end Internet dynamics

Measurements and analysis of end-to-end Internet dynamics
Promoting the use of end-to-end congestion control in the Internet

IEEE/ACM Transactions on Networking (TON)
A scalable SNMP-based distibuted monitoring system for heterogeneous network computing

Proceedings of the 2000 ACM/IEEE conference on Supercomputing
Trajectory sampling for direct traffic observation

IEEE/ACM Transactions on Networking (TON)
Resilient overlay networks

SOSP '01 Proceedings of the eighteenth ACM symposium on Operating systems principles
On the constancy of internet path properties

IMW '01 Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement
Network tomography on general topologies

SIGMETRICS '02 Proceedings of the 2002 ACM SIGMETRICS international conference on Measurement and modeling of computer systems
Controlling high bandwidth aggregates in the network

ACM SIGCOMM Computer Communication Review
Measuring ISP topologies with rocketfuel

Proceedings of the 2002 conference on Applications, technologies, architectures, and protocols for computer communications
A scalable monitoring approach for service level agreements validation

ICNP '00 Proceedings of the 2000 International Conference on Network Protocols
HiFi: A New Monitoring Architecture for Distributed Systems Management

ICDCS '99 Proceedings of the 19th IEEE International Conference on Distributed Computing Systems
On the Sensitivity of Network Simulation to Topology

MASCOTS '02 Proceedings of the 10th IEEE International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunications Systems
Centertrack: an IP overlay network for tracking DoS floods

SSYM'00 Proceedings of the 9th conference on USENIX Security Symposium - Volume 9
Sting: a TCP-based network measurement tool

USITS'99 Proceedings of the 2nd conference on USENIX Symposium on Internet Technologies and Systems - Volume 2
Multicast-based inference of network-internal loss characteristics

IEEE Transactions on Information Theory
On detecting service violations and bandwidth theft in QoS network domains

Computer Communications
The use of end-to-end multicast measurements for characterizing internal network behavior

IEEE Communications Magazine
Measurement-based network monitoring and inference: scalability and missing information

IEEE Journal on Selected Areas in Communications
Exploiting agent mobility for large-scale network monitoring

IEEE Network: The Magazine of Global Internetworking

Measuring the edge-to-edge available bandwidth in a DiffServ domain

International Journal of Network Management
Monitoring of SLA compliances for hosted streaming services

IM'09 Proceedings of the 11th IFIP/IEEE international conference on Symposium on Integrated Network Management
A table-driven approach for IP traceback based on network statistic analysis

ICACT'09 Proceedings of the 11th international conference on Advanced Communication Technology - Volume 3
Scalable diagnosis in IP networks using path-based measurement and inference: A learning framework

Journal of Visual Communication and Image Representation
Toward a scalable and collaborative network monitoring overlay

TMA'11 Proceedings of the Third international conference on Traffic monitoring and analysis
SLA-based complementary approach for network intrusion detection

Computer Communications
A cooperative network monitoring overlay

NEW2AN'11/ruSMART'11 Proceedings of the 11th international conference and 4th international conference on Smart spaces and next generation wired/wireless networking
Scalable and adaptive qos mapping control framework for packet video delivery

PCM'05 Proceedings of the 6th Pacific-Rim conference on Advances in Multimedia Information Processing - Volume Part II
Service Violation Monitoring Model for Detecting and Tracing Bandwidth Abuse

Journal of Network and Systems Management

Quantified Score

Hi-index	0.00

Visualization

Abstract

Continuous monitoring of a network domain poses several challenges. First, routers of a network domain need to be polled periodically to collect statistics about delay, loss, and bandwidth. Second, this huge amount of data has to be mined to obtain useful monitoring information. This increases the overhead for high speed core routers, and restricts the monitoring process from scaling to a large number of flows. To achieve scalability, polling and measurements that involve core routers should be avoided. We design and evaluate a distributed monitoring scheme that uses only edge-to-edge measurements, and scales well to large network domains. In our scheme, all edge routers form an overlay network with their neighboring edge routers. The network is probed intelligently from nodes in the overlay to detect congestion in both directions of a link. The proposed scheme involves only edge routers, and requires significantly fewer number of probes than existing monitoring schemes. Through analytic study and a series of experiments, we show that the proposed scheme can effectively identify the congested links. The congested links are used to capture the misbehaving flows that are violating their service level agreements, or attacking the domain by injecting excessive traffic.