Abstract
We investigate the applicability of packet sampling techniques to flow-based accounting. First we show by theoretical considerations how the achievable accuracy depends on sampling techniques, parameters and traffic characteristics. Then we investigate empirically which accuracy is achieved with typical flow characteristics by experiments with real traffic traces from three different networks. In a third step we illustrate how to support sampling-based accounting by providing an accuracy statement together with the measured data. We show which information is required for this and how an accuracy assessment can be approximated from information available after the sampling process using information elements of the IP flow information export protocol (IPFIX).
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Duffield, N., Lund, C., Thorup, M.: Charging from Sampled Network Usage. In: ACM Internet Measurement Workshop IMW 2001, San Francisco, USA, November 1-2 (2001)
Estan, C., Varghese, G.: New Directions in Traffic Measurement and Accounting: Focusing on the Elephants, Ignoring the Mice. ACM Transactions on Computer Systems (August 2003)
Raspall, F., Sallent, S., Yufera, J.: Shared-state sampling. In: Proceedings of the 6th Internet Measurement Conference (IMC 2006), Rio de Janeriro, Brazil (2006)
Kodialam, M., Lakshman, T.V., Mohanty, S.: Runs bAsed Traffic Estimator (RATE): A Simple, Memory Efficient Scheme for Per-Flow Rate Estimation. In: IEEE INFOCOM 2004, Hong Kong (2004)
NetFlow Performance Analysis, Cisco white paper (2005), http://www.cisco.com/en/US/products/ps6601/products_white_paper0900aecd802a0eb9.shtml
Zseby, T., Molina, M., Duffield, N., Niccolini, S., Raspall, F.: Sampling and Filtering Techniques for IP Packet Selection. Internet Draft <draft-ietf-psamp-sample-tech-10.txt> (work in progress, June 2007)
Quittek, J., Zseby, T., Claise, B., Zander, S.: Requirements for IP Flow Information Export (IPFIX). In: RFC 3917 (October 2004)
Zseby, T.: Stratification Strategies for Sampling-based Non-intrusive Measurements of One-way Delay. In: Proceedings of Passive and Active Measurement Workshop (PAM 2003) April 6-8 (2003)
Cochran, W.G.: Stichprobenverfahren. Walter de Gruyter &Co, Berlin, New York (1972)
Schwarz, H.: Stichprobenverfahren. Oldenbourg Verlag, GmbH (1975)
Quittek, J., Bryant, S., Claise, B., Aitken, P., Meyer, J.: Information Model for IP Flow Information Export. In: RFC 5102 (January 2008)
Claise, B. (ed.): Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of IP Traffic Flow Information. In: RFC 5101 (January 2008)
Dietz, T., Dressler, F., Carle, G., Claise, B., Aitken, P.: Information Model for Packet Sampling Exports, Internet-Draft draft-ietf-psamp-info-07.txt (work in progress, October 2007)
Waikato Internet Traffic Storage (WITS), http://wand.cs.waikato.ac.nz/wand/wits/
Fisz, M.: Probability Theory and Mathematical Statistics, 3rd edn. Robert E. Krieger Publishing Company Inc, Malabar, Florida (1963)
Wentzel, E.S., Owtscharow, L.A.: Aufgabensammlung zur Wahrscheinlichkeitsrechnung. Akademieverlag, Berlin (1975)
Centre Interuniversitaire de Ressources Informatiques de Lorraine (CIRIL), http://www.ciril.fr/
Author information
Authors and Affiliations
Editor information
Rights and permissions
Copyright information
© 2008 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Zseby, T., Hirsch, T., Claise, B. (2008). Packet Sampling for Flow Accounting: Challenges and Limitations. In: Claypool, M., Uhlig, S. (eds) Passive and Active Network Measurement. PAM 2008. Lecture Notes in Computer Science, vol 4979. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-79232-1_7
Download citation
DOI: https://doi.org/10.1007/978-3-540-79232-1_7
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-79231-4
Online ISBN: 978-3-540-79232-1
eBook Packages: Computer ScienceComputer Science (R0)