Traffic Monitoring and Analysis

This book constitutes the proceedings of the First International Workshop on Traffic Monitoring and Analysis, TMA 2008, held in Aachen, Germany, on May 11, 2008 in conjunction with the IFIP Networking 2008 conference. The workshop is an initiative from the COST Action IC0703 "Data Traffic Monitoring and Analysis: Theory, Techniques, Tools and Applications for the Future Networks".

The 15 papers contained in this volume were carefully reviewed and selected from 34 submissions. They encompass research areas related to traffic analysis and classification, measurements, topology, discovery, detection of specific applications and events, packet inspection, and traffic inference. The papers are organized in topical sections on QoS measurement, rupture detection, traffic classification, as well as traffic analysis and topology measurements.

Klappentext

The First International Workshop on Traffic Monitoring and Analysis (TMA 2009) was an initiative from the COST Action IC0703 "Data Traffic Monitoring and Analysis: Theory, Techniques, Tools and Applications for the Future Networks" (www.cost-tma.eu). The COST program is an intergovernmental framework for European Cooperation in Science and Technology, allowing the coordination of nationally funded research on a European level. Each COST Action contributes to reducing the fragmentation in research and opening the European Research Area to cooperation worldwide. Traffic monitoring and analysis (TMA) is now an important research topic within the field of networking. It involves many research groups worldwide that are coll- tively advancing our understanding of the Internet. The importance of TMA research is motivated by the fact that modern packet n- works are highly complex and ever-evolving objects. Understanding, developing and managing such environments is difficult and expensive in practice. Traffic monitoring is a key methodology for understanding telecommunication technology and improving its operation, and the recent advances in this field suggest that evolved TMA-based techniques can play a key role in the operation of real networks. Moreover, TMA offers a basis for prevention and response in network security, as typically the det- tion of attacks and intrusions requires the analysis of detailed traffic records. On the more theoretical side, TMA is an attractive research topic for many reasons.

Inhalt

QoS Measurement.- Realistic Passive Packet Loss Measurement for High-Speed Networks.- Inferring Queue State by Measuring Delay in a WiFi Network.- Network-Wide Measurements of TCP RTT in 3G.- Rupture Detection.- Portscan Detection with Sampled NetFlow.- Automated Detection of Load Changes in Large-Scale Networks.- Passive, Streaming Inference of TCP Connection Structure for Network Server Management.- Traffic Classification.- GTVS: Boosting the Collection of Application Traffic Ground Truth.- TIE: A Community-Oriented Traffic Classification Platform.- Revealing the Unknown ADSL Traffic Using Statistical Methods.- Accurate, Fine-Grained Classification of P2P-TV Applications by Simply Counting Packets.- Detection and Tracking of Skype by Exploiting Cross Layer Information in a Live 3G Network.- Traffic Analysis and Topology Measurements.- Incentives for BGP Guided IP-Level Topology Discovery.- Scaling Analysis of Wavelet Quantiles in Network Traffic.- KISS: Stochastic Packet Inspection.- DTS: A Decentralized Tracing System.