End-to-end internet packet dynamics
IEEE/ACM Transactions on Networking (TON)
On the constancy of internet path properties
IMW '01 Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement
Detection and analysis of routing loops in packet traces
Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment
Analysis of link failures in an IP backbone
Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment
End-to-end WAN service availability
IEEE/ACM Transactions on Networking (TON)
Towards an accurate AS-level traceroute tool
Proceedings of the 2003 conference on Applications, technologies, architectures, and protocols for computer communications
The Temporal and Topological Characteristics of BGP Path Changes
ICNP '03 Proceedings of the 11th IEEE International Conference on Network Protocols
Operating system support for planetary-scale network services
NSDI'04 Proceedings of the 1st conference on Symposium on Networked Systems Design and Implementation - Volume 1
PlanetLab: overview, history, and future directions
ACM SIGOPS Operating Systems Review
Using PlanetLab for network research: myths, realities, and best practices
ACM SIGOPS Operating Systems Review
WiFiProfiler: cooperative diagnosis in wireless LANs
Proceedings of the 4th international conference on Mobile systems, applications and services
Mining web logs to debug distant connectivity problems
Proceedings of the 2006 SIGCOMM workshop on Mining network data
Diagnosis of TCP overlay connection failures using bayesian networks
Proceedings of the 2006 SIGCOMM workshop on Mining network data
Flooding attacks by exploiting persistent forwarding loops
IMC '05 Proceedings of the 5th ACM SIGCOMM conference on Internet Measurement
Using PlanetLab for network research: myths, realities, and best practices
WORLDS'05 Proceedings of the 2nd conference on Real, Large Distributed Systems - Volume 2
Pong: diagnosing spatio-temporal internet congestion properties
Proceedings of the 2007 ACM SIGMETRICS international conference on Measurement and modeling of computer systems
A measurement study of persistent forwarding loops on the Internet
Computer Networks: The International Journal of Computer and Telecommunications Networking
Experience-driven experimental systems research
Communications of the ACM
Experiences building PlanetLab
OSDI '06 Proceedings of the 7th symposium on Operating systems design and implementation
iPlane: an information plane for distributed services
OSDI '06 Proceedings of the 7th symposium on Operating systems design and implementation
NetDiagnoser: troubleshooting network unreachabilities using end-to-end probes and routing data
CoNEXT '07 Proceedings of the 2007 ACM CoNEXT conference
Implementation and preliminary evaluation of an ISP-driven informed path selection
CoNEXT '07 Proceedings of the 2007 ACM CoNEXT conference
A study of end-to-end web access failures
CoNEXT '06 Proceedings of the 2006 ACM CoNEXT conference
Effective diagnosis of routing disruptions from end systems
NSDI'08 Proceedings of the 5th USENIX Symposium on Networked Systems Design and Implementation
Studying black holes in the internet with Hubble
NSDI'08 Proceedings of the 5th USENIX Symposium on Networked Systems Design and Implementation
Ispy: detecting ip prefix hijacking on my own
Proceedings of the ACM SIGCOMM 2008 conference on Data communication
Practical issues with using network tomography for fault diagnosis
ACM SIGCOMM Computer Communication Review
Co-designing the failure analysis and monitoring of large-scale systems
ACM SIGMETRICS Performance Evaluation Review
Probabilistic IP prefix authentication (PIPA) for prefix hijacking
CFI '09 Proceedings of the 4th International Conference on Future Internet Technologies
iPlane Nano: path prediction for peer-to-peer applications
NSDI'09 Proceedings of the 6th USENIX symposium on Networked systems design and implementation
Moving beyond end-to-end path information to optimize CDN performance
Proceedings of the 9th ACM SIGCOMM conference on Internet measurement conference
Impact of prefix-match changes on IP reachability
Proceedings of the 9th ACM SIGCOMM conference on Internet measurement conference
Measurement methods for fast and accurate blackhole identification with binary tomography
Proceedings of the 9th ACM SIGCOMM conference on Internet measurement conference
Leveraging bittorrent for end host measurements
PAM'07 Proceedings of the 8th international conference on Passive and active network measurement
Webprofiler: cooperative diagnosis of web failures
COMSNETS'10 Proceedings of the 2nd international conference on COMmunication systems and NETworks
California fault lines: understanding the causes and impact of network failures
Proceedings of the ACM SIGCOMM 2010 conference
Crowdsourcing service-level network event monitoring
Proceedings of the ACM SIGCOMM 2010 conference
NSDI'10 Proceedings of the 7th USENIX conference on Networked systems design and implementation
HostView: annotating end-host performance measurements with user feedback
ACM SIGMETRICS Performance Evaluation Review
Scalable and systematic Internet-wide path and delay estimation from existing measurements
Computer Networks: The International Journal of Computer and Telecommunications Networking
iSPY: detecting IP prefix hijacking on my own
IEEE/ACM Transactions on Networking (TON)
HotACI'06 Proceedings of the First international conference on Hot topics in autonomic computing
The flexlab approach to realistic evaluation of networked systems
NSDI'07 Proceedings of the 4th USENIX conference on Networked systems design & implementation
FACT: flow-based approach for connectivity tracking
PAM'11 Proceedings of the 12th international conference on Passive and active measurement
Measuring and characterizing end-to-end route dynamics in the presence of load balancing
PAM'11 Proceedings of the 12th international conference on Passive and active measurement
Cellular data network infrastructure characterization and implication on mobile content placement
Proceedings of the ACM SIGMETRICS joint international conference on Measurement and modeling of computer systems
Cellular data network infrastructure characterization and implication on mobile content placement
ACM SIGMETRICS Performance Evaluation Review - Performance evaluation review
Predicting and tracking internet path changes
Proceedings of the ACM SIGCOMM 2011 conference
Identifying performance bottlenecks in CDNs through TCP-level monitoring
Proceedings of the first ACM SIGCOMM workshop on Measurements up the stack
An integrative multi-level analysis of internet path changes
Proceedings of The ACM CoNEXT Student Workshop
NetProfiler: profiling wide-area networks using peer cooperation
IPTPS'05 Proceedings of the 4th international conference on Peer-to-Peer Systems
LIFEGUARD: practical repair of persistent route failures
Proceedings of the ACM SIGCOMM 2012 conference on Applications, technologies, architectures, and protocols for computer communication
LIFEGUARD: practical repair of persistent route failures
ACM SIGCOMM Computer Communication Review - Special october issue SIGCOMM '12
Improving availability in distributed systems with failure informers
nsdi'13 Proceedings of the 10th USENIX conference on Networked Systems Design and Implementation
Trinocular: understanding internet reliability through adaptive probing
Proceedings of the ACM SIGCOMM 2013 conference on SIGCOMM
PoiRoot: investigating the root cause of interdomain path changes
Proceedings of the ACM SIGCOMM 2013 conference on SIGCOMM
Fine-grain diagnosis of overlay performance anomalies using end-point network experiences
Proceedings of the 8th International Conference on Network and Service Management
A comparison of syslog and IS-IS for network failure analysis
Proceedings of the 2013 conference on Internet measurement conference
Federated flow-based approach for privacy preserving connectivity tracking
Proceedings of the ninth ACM conference on Emerging networking experiments and technologies
Hi-index | 0.02 |
Detecting network path anomalies generally requires examining large volumes of traffic data to find misbehavior. We observe that wide-area services, such as peer-to-peer systems and content distribution networks, exhibit large traffic volumes, spread over large numbers of geographically-dispersed endpoints. This makes them ideal candidates for observing wide-area network behavior. Specifically, we can combine passive monitoring of wide-area traffic to detect anomalous network behavior, with active probes from multiple nodes to quantify and characterize the scope of these anomalies. This approach provides several advantages over other techniques: (1) we obtain more complete and finer-grained views of failures since the wide-area nodes already provide geographically diverse vantage points; (2) we incur limited additional measurement cost since most active probing is initiated when passive monitoring detects oddities; and (3) we detect failures at a much higher rate than other researchers have reported since the services provide large volumes of traffic to sample. This paper shows how to exploit this combination of wide-area traffic, passive monitoring, and active probing, to both understand path anomalies and to provide optimization opportunities for the host service.