Consistency analysis of network traffic repositories

Elmer Lastdrager; Aiko Pras

doi:10.1007/978-3-642-03700-9_23

Consistency analysis of network traffic repositories

Elmer Lastdrager, Aiko Pras

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

39 Downloads (Pure)

Abstract

Traffic repositories with TCP/IP header information are very important for network analysis. Researchers often assume that such repositories reliably represent all traffic that has been flowing over the network; little thoughts are made regarding the consistency of these repositories. Still, for various reasons, the traffic capturing process may have missed packets. For certain kinds of analysis, for example loss measurements, such inconsistencies may lead to the wrong conclusions.This paper proposes an algorithm to detect such inconsistencies, using the idea of "fake gaps". A prototype has been developed, and used to test two well-known repositories: the WIDE and Simpleweb repositories. The paper shows that both repositories contain several inconsistencies.

Original language	English
Title of host publication	The Internet of the Future, 15th Open European Summer School and IFIP TC6.6 Workshop, EUNICE 2009
Place of Publication	London
Publisher	Springer
Pages	217-226
Number of pages	10
ISBN (Print)	978-3-642-03699-6
DOIs	https://doi.org/10.1007/978-3-642-03700-9_23
Publication status	Published - Sept 2009
Event	15th Open European Summer School and IFIP TC6.6 Workshop 2009 - Barcelona, Spain Duration: 7 Sept 2009 → 9 Sept 2009 Conference number: 15 http://www.nets.upf.edu/pages/eunice09/

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer Verlag
Volume	5733
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Workshop

Workshop	15th Open European Summer School and IFIP TC6.6 Workshop 2009
Abbreviated title	EUNICE 2009
Country/Territory	Spain
City	Barcelona
Period	7/09/09 → 9/09/09
Internet address	http://www.nets.upf.edu/pages/eunice09/

Access to Document

10.1007/978-3-642-03700-9_23

ArticleFinal published version, 176 KB

Cite this

@inproceedings{5e81cb1703e941d3b683b63e281a80af,

title = "Consistency analysis of network traffic repositories",

abstract = "Traffic repositories with TCP/IP header information are very important for network analysis. Researchers often assume that such repositories reliably represent all traffic that has been flowing over the network; little thoughts are made regarding the consistency of these repositories. Still, for various reasons, the traffic capturing process may have missed packets. For certain kinds of analysis, for example loss measurements, such inconsistencies may lead to the wrong conclusions.This paper proposes an algorithm to detect such inconsistencies, using the idea of {"}fake gaps{"}. A prototype has been developed, and used to test two well-known repositories: the WIDE and Simpleweb repositories. The paper shows that both repositories contain several inconsistencies.",

author = "Elmer Lastdrager and Aiko Pras",

year = "2009",

month = sep,

doi = "10.1007/978-3-642-03700-9_23",

language = "English",

isbn = "978-3-642-03699-6",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "217--226",

booktitle = "The Internet of the Future, 15th Open European Summer School and IFIP TC6.6 Workshop, EUNICE 2009",

address = "Germany",

note = "15th Open European Summer School and IFIP TC6.6 Workshop 2009, EUNICE 2009 ; Conference date: 07-09-2009 Through 09-09-2009",

url = "http://www.nets.upf.edu/pages/eunice09/",

}

Lastdrager, E & Pras, A 2009, Consistency analysis of network traffic repositories. in The Internet of the Future, 15th Open European Summer School and IFIP TC6.6 Workshop, EUNICE 2009. Lecture Notes in Computer Science, vol. 5733, Springer, London, pp. 217-226, 15th Open European Summer School and IFIP TC6.6 Workshop 2009, Barcelona, Spain, 7/09/09. https://doi.org/10.1007/978-3-642-03700-9_23

Consistency analysis of network traffic repositories. / Lastdrager, Elmer; Pras, Aiko.
The Internet of the Future, 15th Open European Summer School and IFIP TC6.6 Workshop, EUNICE 2009. London: Springer, 2009. p. 217-226 (Lecture Notes in Computer Science; Vol. 5733).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Consistency analysis of network traffic repositories

AU - Lastdrager, Elmer

AU - Pras, Aiko

N1 - Conference code: 15

PY - 2009/9

Y1 - 2009/9

N2 - Traffic repositories with TCP/IP header information are very important for network analysis. Researchers often assume that such repositories reliably represent all traffic that has been flowing over the network; little thoughts are made regarding the consistency of these repositories. Still, for various reasons, the traffic capturing process may have missed packets. For certain kinds of analysis, for example loss measurements, such inconsistencies may lead to the wrong conclusions.This paper proposes an algorithm to detect such inconsistencies, using the idea of "fake gaps". A prototype has been developed, and used to test two well-known repositories: the WIDE and Simpleweb repositories. The paper shows that both repositories contain several inconsistencies.

AB - Traffic repositories with TCP/IP header information are very important for network analysis. Researchers often assume that such repositories reliably represent all traffic that has been flowing over the network; little thoughts are made regarding the consistency of these repositories. Still, for various reasons, the traffic capturing process may have missed packets. For certain kinds of analysis, for example loss measurements, such inconsistencies may lead to the wrong conclusions.This paper proposes an algorithm to detect such inconsistencies, using the idea of "fake gaps". A prototype has been developed, and used to test two well-known repositories: the WIDE and Simpleweb repositories. The paper shows that both repositories contain several inconsistencies.

U2 - 10.1007/978-3-642-03700-9_23

DO - 10.1007/978-3-642-03700-9_23

M3 - Conference contribution

SN - 978-3-642-03699-6

T3 - Lecture Notes in Computer Science

SP - 217

EP - 226

BT - The Internet of the Future, 15th Open European Summer School and IFIP TC6.6 Workshop, EUNICE 2009

PB - Springer

CY - London

T2 - 15th Open European Summer School and IFIP TC6.6 Workshop 2009

Y2 - 7 September 2009 through 9 September 2009

ER -

Consistency analysis of network traffic repositories

Abstract

Publication series

Workshop

Access to Document

Fingerprint

Cite this