Next Generation Application-Aware Flow Monitoring

Abstract : Deep packet inspection (DPI) and IP flow monitoring are frequently used network monitoring approaches. Although the DPI provides application visibility, detailed examination of every packet is computationally intensive. The IP flow monitoring achieves high performance by processing only packet headers, but provides less details about the traffic itself. Application-aware flow monitoring is proposed as an attempt to combine DPI accuracy and IP flow monitoring performance. However, the impacts, benefits and disadvantages of application flow monitoring have not been studied in detail yet. The work proposed in this paper attempts to rectify this lack of research. We also propose a next generation flow measurement for application monitoring. The flows will represent events within the application protocol, e.g., web page download, instead of packet stream. Finally, we will investigate the performance of different approaches to application classification and application parsing with a computational complexity in mind.
Complete list of metadatas

Cited literature [19 references]  Display  Hide  Download

https://hal.inria.fr/hal-01401303
Contributor : Hal Ifip <>
Submitted on : Wednesday, November 23, 2016 - 10:26:58 AM
Last modification on : Wednesday, November 23, 2016 - 10:37:15 AM
Long-term archiving on : Monday, March 20, 2017 - 10:27:05 PM

File

978-3-662-43862-6_20_Chapter.p...
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Petr Velan, Pavel Čeleda. Next Generation Application-Aware Flow Monitoring. 8th IFIP International Conference on Autonomous Infrastructure, Management and Security (AIMS), Jun 2014, Brno, Czech Republic. pp.173-178, ⟨10.1007/978-3-662-43862-6_20⟩. ⟨hal-01401303⟩

Share

Metrics

Record views

76

Files downloads

158