Adaptive Aggregation of Flow Records
Keywords:Network traffic monitoring, IPFIX, exporter, flow record, data reduction, adaptive aggregation, heavy-hitter, resource utilization
AbstractThis paper explores the problem of processing the immense volume of measurement data arising during network traffic monitoring. Due to the ever-increasing demands of current networks, observing accurate information about every single flow is virtually infeasible. In many cases the existing methods for the reduction of flow records are still not sufficient enough. Since the accurate knowledge of flows termed as "heavy-hitters" suffices to fulfill most of the monitoring purposes, we decided to aggregate the flow records pertaining to non-heavy-hitters. However, due to the ever-changing nature of traffic, their identification is a challenge. To overcome this challenge, our proposed approach - the adaptive aggregation of flow records - automatically adjusts its operation to the actual traffic load and to the monitoring requirements. Preliminary experiments in existing network topologies showed that adaptive aggregation efficiently reduces the number of flow records, while a significant proportion of traffic details is preserved.
Download data is not yet available.
How to Cite
Pekár, A., Chovanec, M., Vokorokos, L., Chovancová, E., Feciľak, P., & Michalko, M. (2018). Adaptive Aggregation of Flow Records. COMPUTING AND INFORMATICS, 37(1), 142–164. Retrieved from https://www.cai.sk/ojs/index.php/cai/article/view/2018_1_142