The changing nature of network traffic: scaling phenomena

In this paper, we report on some preliminary results from an in-depth, wavelet-based analysis of a set of high-quality, packet-level traffic measurements, collected over the last 6-7 years from a number of different wide-area networks (WANs). We first validate and confirm an earlier finding, originally due to Paxson and Floyd [14], that actual WAN traffic is consistent with statistical self-similarity for sufficiently large time scales. We then relate this large-time scaling phenomenon to the empirically observed characteristics of WAN traffic at the level of individual connections or applications. In particular, we present here original results about a detailed statistical analysis of Web-session characteristics, and report on an intriguing scaling property of measured WAN traffic at the transport layer (i.e., number of TCP connection arrivals per time unit). This scaling property of WAN traffic at the TCP layer was absent in the pre-Web period but has become ubiquitous in today's WWW-dominated WANs and is a direct consequence of the ever-increasing popularity of the Web (WWW) and its emergence as the major contributor to WAN traffic. Moreover, we show that this changing nature of WAN traffic can be naturally accounted for by self-similar traffic models, primarily because of their ability to provide physical explanations for empirically observed traffic phenomena in a networking context. Finally, we provide empirical evidence that actual WAN traffic traces also exhibit scaling properties over small time scales, but that the small-time scaling phenomenon is distinctly different from the observed large-time scaling property. We relate this newly observed characteristic of WAN traffic to the effects that the dominant network protocols (e.g., TCP) and controls have on the flow of packets across the network and discuss the potential that multifractals have in this context for providing a structural modeling approach for WAN traffic and for capturing in a compact and parsimonious manner the observed scaling phenomena at large as well as small time scales.

[1]  Walter Willinger,et al.  Self-similarity and heavy tails: structural modeling of network traffic , 1998 .

[2]  Edward C. Waymire,et al.  Multifractal Dimensions and Scaling Exponents for Strongly Bounded Random Cascades , 1992 .

[3]  Sally Floyd,et al.  Wide area traffic: the failure of Poisson modeling , 1995, TNET.

[4]  Anja Feldmann,et al.  On-line Call Admission for High-Speed Networks , 1995 .

[5]  Ingrid Daubechies,et al.  Ten Lectures on Wavelets , 1992 .

[6]  Edward C. Waymire,et al.  A statistical analysis of mesoscale rainfall as a random cascade , 1993 .

[7]  D. Veitch.  Wavelet Analysis of Long Range Dependent Traac , 1998 .

[8]  W. Kilmer.  A Friendly Guide To Wavelets , 1998, Proceedings of the IEEE.

[9]  Walter Willinger,et al.  Is Network Traffic Self-Similar or Multifractal? , 1997 .

[10]  T. Kurtz.  Limit theorems for workload input models , 2000 .

[11]  Sally Floyd,et al.  Wide-area traffic: the failure of Poisson modeling , 1994 .

[12]  Patrice Abry,et al.  Wavelet Analysis of Long-Range-Dependent Traffic , 1998, IEEE Trans. Inf. Theory.

[13]  Y. Meyer.  Wavelets and Operators , 1993 .

[14]  Walter Willinger,et al.  On the self-similar nature of Ethernet traffic , 1993, SIGCOMM '93.

[15]  Walter Willinger,et al.  A Bibliographical Guide to Self-Similar Traffic and Performance Modeling for Modern High-Speed Netwo , 1996 .

[16]  Azer Bestavros,et al.  Self-similarity in World Wide Web traffic: evidence and possible causes , 1996, SIGMETRICS '96.

[17]  W. Willinger,et al.  Is network tra?c self-similar of multifractal , 1997 .

[18]  Rudolf H. Riedi,et al.  Multifractal Properties of TCP Traffic: a Numerical Study , 1997 .

[19]  Walter Willinger,et al.  Self-similarity through high-variability: statistical analysis of Ethernet LAN traffic at the source level , 1997, TNET.

[20]  W. Richard Stevens,et al.  TCP/IP Illustrated, Volume 1: The Protocols , 1994 .