Article ID | Journal | Published Year | Pages | File Type |
---|---|---|---|---|
6879924 | Computer Communications | 2018 | 13 Pages |
Abstract
In this paper we show that the simplest approach of counting as a retransmission a packet whose sequence number is smaller than the previous one is enough to detect pathological flows with severe retransmissions. Such a lightweight approach eliminates the need of tracking the whole TCP flow history, which severely restricts traffic analysis throughput. Our findings show that low False Positive Rates (FPR) and False Negative Rates (FNR) can be achieved in the detection of such pathological flows with severe retransmissions, which are of paramount importance for QoS monitoring. Most importantly, we show that live detection of such pathological flows at 10 Gb/s rate per processing core is feasible.
Related Topics
Physical Sciences and Engineering
Computer Science
Computer Networks and Communications
Authors
Eduardo Miravalls-Sierra, David Muelas, Javier Ramos, Jorge E. López de Vergara, Daniel Morató, Javier Aracil,