Passive traffic measurement Capturing actual Internet packets in order to measure: –Packet sizes –Traffic volumes –Application utilisation –Resource utilisation.

Slides:

Advertisements

Similar presentations

COS 461 Fall 1997 Networks and Protocols u networks and protocols –definitions –motivation –history u protocol hierarchy –reasons for layering –quick tour.

Advertisements

Introduction to Network Analysis and Sniffer Pro

BTT 101 / 2O1 Lesson 10 Dundas Valley Secondary Mr. Young.

Lab Practical 2 Study about different types of Networking Device

Networks Adapting Computers to Telecommunications Media.

Chapter 8: Local Area Networks: Internetworking. 2 Objectives List the reasons for interconnecting multiple local area network segments and interconnecting.

Internet Traffic Patterns Learning outcomes –Be aware of how information is transmitted on the Internet –Understand the concept of Internet traffic –Identify.

Network Traffic Measurement and Modeling CSCI 780, Fall 2005.

Copyright © 2005 Department of Computer Science CPSC 641 Winter Network Traffic Measurement A focus of networking research for 20+ years Collect.

Internetworking Devices that connect networks are called Internetworking devices. A segment is a network which does not contain Internetworking devices.

Local Area Networks Part II. 2 Introduction Many times it is necessary to connect a local area network to another local area network or to a wide area.

© 2007 Cisco Systems, Inc. All rights reserved.Cisco Public 1 Version 4.0 Communicating over the Network Network Fundamentals – Chapter 2.

Remote Monitoring and Desktop Management Week-7. SNMP designed for management of a limited range of devices and a limited range of functions Monitoring.

Network Simulation Internet Technologies and Applications.

1 Network Strategy By Mr J. Sloan. Ideas Protocol WAN LAN Node What is a… Workstation File Server Print Server.

Basic Networking for DVR’s Instructor’s name : Everfocus Sales Rep.

The Basics of Networking. Rick Graziani What is networking? Communication! An interconnection of computers and other devices: –Printers.

LECTURE 9 CT1303 LAN. LAN DEVICES Network: Nodes: Service units: PC Interface processing Modules: it doesn’t generate data, but just it process it and.

Networks LANS,. FastPoll True Questions Answer A for True and B for False A wireless infrastructure network uses a centralized broadcasting device, such.

COEN 252 Computer Forensics

© 2007 Cisco Systems, Inc. All rights reserved.Cisco Public 1 Communicating over the Network Network Fundamentals – Chapter 2.

Lecture 2 TCP/IP Protocol Suite Reference: TCP/IP Protocol Suite, 4 th Edition (chapter 2) 1.

Chapter 4. After completion of this chapter, you should be able to: Explain “what is the Internet? And how we connect to the Internet using an ISP. Explain.

Introduction to networking Devices. Objectives  Be able to describe the common networking devices and their functionality, including:  Repeaters  Hubs.

Computer Concepts 2014 Chapter 5 Local Area Networks.

Module 4: Designing Routing and Switching Requirements.

15-1 Networking Computer network A collection of computing devices that are connected in various ways in order to communicate and share resources.

Today’s Topics Chapter 8: Networks Chapter 8: Networks HTML Introduction HTML Introduction.

Computer Networks. Data & Communication When we communicate we share information  Local Communication, if Face to Face  Remote, if through Telephone.

Networks CS105. What is a computer network? A computer network is a collection of computing devices that are connected in various ways so that they can.

Linux Networking and Security

Networking Components Daniel Rosser LTEC Network Hub It is very difficult to find Hubs anymore Hubs sends data from one computer to all other computers.

NETWORKING COMPONENTS Buddy Steele Assignment 3, Part 1 CECS-5460: Summer 2014.

Summary - Part 2 - Objectives The purpose of this basic IP technology training is to explain video over IP network. This training describes how video can.

© 2007 Cisco Systems, Inc. All rights reserved.Cisco Public ITE PC v4.0 Chapter 1 1 Communicating over the Network Network Fundamentals – Chapter 2.

BZUPAGES.COM Presentation on TCP/IP Presented to: Sir Taimoor Presented by: Jamila BB Roll no Nudrat Rehman Roll no

Components of wireless LAN & Its connection to the Internet

Networks. What is a computer network? A network is two or more computers that are linked together so that they are able to share resources.

CCNA Guide to Cisco Networking Chapter 2: Network Devices.

Higher Computing Networking. Networking – Local Area Networks.

© 2007 Cisco Systems, Inc. All rights reserved.Cisco Public ITE PC v4.0 Chapter 1 1 Communicating over the Network Network Fundamentals – Chapter 2.

Rehab AlFallaj.  Network:  Nodes: Service units: PC Interface processing Modules: it doesn’t generate data, but just it process it and do specific task.

TOPIC 3 DATA TRANSMISSION AND NETWORKING MEDIA. INTERNET SERVICE PROVIDER (ISP) also known as Internet Access Provider (IAP) It is a company that offers.

HP Openview NNM: Scalability and Distribution. Reference  “HP Openview NNM: A Guide to Scalability and Distribution”,

.  Hubs send data from one computer to all other computers on the network. They are low-cost and low-function and typically operate at Layer 1 of the.

1 Internet Traffic Measurement and Modeling Carey Williamson Department of Computer Science University of Calgary.

Communicating over the Network

Lecture 3 By Miss Irum Matloob.

Section 4 – Computer Networks

Local Area Networks Yiannos Mylonas.

Networks By Lawrence standen.

Computer Data Security & Privacy

Local Area and Wide Area Networks

CT1303 LAN Rehab AlFallaj.

Connecting Networks Repeater: physical layer Bridge: data link layer

Lecture # 7 Firewalls الجدر النارية. Lecture # 7 Firewalls الجدر النارية.

Communicating over the Network

Communicating over the Network

PPPoE Internet Point to Point Protocol over Ethernet

Local Area and Wide Area Networks

Communicating over the Network

Network Models, Hardware, Protocols and number systems

Communicating over the Network

Communicating over the Network

Networks and the Internet

Networking Theory and Protocol.

Communicating over the Network

Communicating over the Network

Presentation transcript:

Passive traffic measurement Capturing actual Internet packets in order to measure: –Packet sizes –Traffic volumes –Application utilisation –Resource utilisation –Network monitoring –Traffic characterisation Commercial products and freeware software –HP openview, NetPredict, tcpdump

Passive traffic measurement monitor Example: Ethernet LAN, because of the CSMA/CD technology, any station can be a monitor and perform passive traffic measurements LAN configuration

Passive Traffic Measurement LAN configuration: –All the traffic of the LAN can potentially be captured –The network card of the monitor node runs in promiscuous mode –The monitor node is responsible for capturing and analysing all the data –Can be used at home in a wireless LAN or even with only a dial-up modem

Passive traffic measurement Example: In a switched packet network, a link is “broken” and a packet analyser is connected between two network nodes WAN configuration monitor

Passive Traffic Measurement WAN configuration: Because connections in WANs are usually point to point links, the measurement needs to be done at specific points Only a network administrator has access to the specific link There are special packet analysers connected as monitors (data processing only node) Routers with packet collectors act as measurement points (regular network node)

Passive Traffic Measurement The following information can be collected: IP packet content User data IP header UDP/TCP header

Passive Traffic Measurements Information that can be collected: Through IP header: –Source IP address –Destination IP address –Packet size Through TCP/UDP header: –Source port –Destination port General utilisation of the LAN or WAN link

Passive Traffic Measurement Disadvantages Compromises security Large storage space for headers and/or packets If using WAN configuration only gives a localized view of the network If using LAN configuration only gives a view of the LAN

Passive Traffic Measurement Overcoming disadvantages Do not capture user data WAN configuration: set up several packet collection points (data processing becomes difficult) Planning collection times so that file sizes can be minimised and the probability of probing different paths is minimised

Passive Traffic Measurement Advantages Detailed information about traffic Effective technique to identify application performance and bandwidth requirements Effective technique to identify possible offending hosts in the network

Passive Traffic Measurement Examples of uses: Volume of traffic Packet inter-arrival times Identify hosts responsible for congestion Identifying most popular applications Identifying flow behaviours Packet sizes Typical transfer sizes Flow measurement

Passive Traffic Measurement

Active traffic measurement Resources Well known port numbers: Trends in Wide Area IP Traffic Patterns 0/AIX0005/AIX0005.html CAIDA Internet Data -- Passive Data Sources

Summary Passive traffic measurement –Able to measure specific protocol related data –Used to monitor, plan and estimate current and future use of networks –It does not provide with a global view of the network Traffic characterisation is important because it helps us to understand exactly how human activities affect networks in particular and the Internet in general.