Sampling and Filtering Techniques for IP Packet Selection

This document describes Sampling and Filtering techniques for IP packet selection. It provides a categorization of schemes and defines what parameters are needed to describe the most common selection schemes. Furthermore, it shows how techniques can be combined to build more elaborate packet Selectors. The document provides the basis for the definition of information models for configuring selection techniques in Metering Processes and for reporting the technique in use to a Collector. [STANDARDS-TRACK]

[1]  George C. Polyzos,et al.  Application of sampling methodologies to network traffic characterization , 1993, SIGCOMM '93.

[2]  Jürgen Quittek,et al.  Packet Sampling (PSAMP) Protocol Specifications , 2009, RFC.

[3]  Maurizio Molina.  A scalable and efficient methodology for flow monitoring in the Internet , 2003 .

[4]  Jürgen Quittek,et al.  Information Model for IP Flow Information Export , 2008, RFC.

[5]  Benoit Claise,et al.  Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of IP Traffic Flow Information , 2008, RFC.

[6]  J. Rexford,et al.  Security vulnerabilities and solutions for packet sampling , 2007, 2007 IEEE Sarnoff Symposium.

[7]  M. Molinaa,et al.  A Comparative Experimental Study of Hash Functions Applied to Packet Sampling , 2005 .

[8]  Lillian N. Cassel,et al.  Management of sampled real-time network measurements , 1989, [1989] Proceedings. 14th Conference on Local Computer Networks.

[9]  Hugo Krawczyk,et al.  Pseudorandom functions revisited: the cascade construction and its concrete security , 1996, Proceedings of 37th Conference on Foundations of Computer Science.

[10]  Carsten Lund,et al.  Charging from sampled network usage , 2001, IMW '01.

[11]  Fred Baker,et al.  Ingress Filtering for Multihomed Networks , 2004, RFC.

[12]  Tanja Zseby,et al.  Evaluation of Header Field Entropy for Hash-Based Packet Selection , 2008, PAM.

[13]  Albert G. Greenberg,et al.  A Framework for Packet Selection and Reporting , 2009, RFC.

[14]  Nick G. Duffield,et al.  Trajectory engine: a backend for trajectory sampling , 2002, NOMS 2002. IEEE/IFIP Network Operations and Management Symposium. ' Management Solutions for the New Communications World'(Cat. No.02CH37327).

[15]  Alan Kullberg,et al.  Incremental updating of the Internet checksum , 1990, RFC.

[16]  Stratification Strategies for Sampling-based Non-intrusive Measurements of One-way Delay , 2003 .

[17]  Lixia Zhang,et al.  Resource ReSerVation Protocol (RSVP) - Version 1 Functional Specification , 1997, RFC.

[18]  D. Horvitz,et al.  A Generalization of Sampling Without Replacement from a Finite Universe , 1952 .

[19]  George Varghese,et al.  New directions in traffic measurement and accounting , 2002, CCRV.

[20]  Scott O. Bradner,et al.  Key words for use in RFCs to Indicate Requirement Levels , 1997, RFC.

[21]  Georg Carle,et al.  Information Model for Packet Sampling Exports , 2009, RFC.

[22]  Anil Rijsinghani,et al.  Computation of the Internet Checksum via Incremental Update , 1994, RFC.

[23]  Nick G. Duffield,et al.  Trajectory sampling for direct traffic observation , 2001, TNET.

[24]  Nick G. Duffield,et al.  Trajectory Sampling With Unreliable Reporting , 2008, IEEE/ACM Transactions on Networking.

[25]  Peter Phaal,et al.  Traffic estimation for the largest sou r ces on a n etwork , u sin g pa ck et sampling with limited storage , 2000 .

[26]  Georg Carle,et al.  Evaluation of building blocks for passive one-way-delay measurements , 2001 .