Next Generation Application-Aware Flow Monitoring

Authors

VELAN Petr ČELEDA Pavel

Year of publication 2014
Type Article in Proceedings
Conference Monitoring and Securing Virtualized Networks and Services, Lecture Notes in Computer Science, Vol. 8508
MU Faculty or unit

Institute of Computer Science

Citation
Web http://dx.doi.org/10.1007/978-3-662-43862-6_20
Doi http://dx.doi.org/10.1007/978-3-662-43862-6_20
Field Informatics
Keywords flow; network measurement; application monitoring; IPFIX
Attached files
Description Deep packet inspection (DPI) and IP flow monitoring are frequently used network monitoring approaches. Although the DPI provides application visibility, detailed examination of every packet is computationally intensive. The IP flow monitoring achieves high performance by processing only packet headers, but provides less details about the traffic itself. Application-aware flow monitoring is proposed as an attempt to combine DPI accuracy and IP flow monitoring performance. However, the impacts, benefits and disadvantages of application flow monitoring have not been studied in detail yet. The work proposed in this paper attempts to rectify this lack of research. We also propose a next generation flow measurement for application monitoring. The flows will represent events within the application protocol, e.g., web page download, instead of packet stream. Finally, we will investigate the performance of different approaches to application classification and application parsing with a computational complexity in mind.
Related projects:

You are running an old browser version. We recommend updating your browser to its latest version.

More info