Flexible flow aggregation for adaptive network monitoring.pdfVIP

Flexible Flow Aggregation for Adaptive Network Monitoring ¨ Falko Dressler Gerhard Munz Autonomic Networking Group Computer Networks and Internet Dept. of Computer Science 7 Wilhelm Schickard Institute for Computer Science ¨ University of Erlangen, Germany University of Tubingen, Germany dressler@informatik.uni-erlangen.de muenz@informatik.uni-tuebingen.de Abstract tacks, propagating worms etc [10]. While the aforemen- tioned applications are still relevant, other domains also re- Network monitoring is a major building block for many quire appropriate network monitoring such as intrusion de- domains in communication networks. Besides typical ac- tection and traceback mechanisms [13] or charging applica- counting mechanisms and the emerging area of charging in tions for next generation networks [7]. Manufacturers have next generation networks, especially network security solu- responded by developing specific monitoring devices or by tions rely on efficient and optimized monitoring. Network adding monitoring functionality into existing products like monitoring in high-speed networks is usually based on flow routers or firewalls. accounting and aggregation techniques represent a neces- A common monitoring technique is flow accounting. sary enhancement in order to cope with increasing amounts The key