Mean-variance relationship of the number of flows in traffic aggregation and its application to traffic management

Ryoichi Kawahara, Tetsuya Takine, Tatsuya Mori, Noriaki Kamiyama, Keisuke Ishibashi

Research output: Contribution to journalArticle

2 Citations (Scopus)

Abstract

We consider the mean-variance relationship of the number of flows in traffic aggregation, where flows are divided into several groups randomly, based on a predefined flow aggregation index, such as source IP address. We first derive a quadratic relationship between the mean and the variance of the number of flows belonging to a randomly chosen traffic aggregation group. Note here that the result is applicable to sampled flows obtained through packet sampling. We then show that our analytically derived mean-variance relationship fits well those in actual packet trace data sets. Next, we present two applications of the mean-variance relationship to traffic management. One is an application to detecting network anomalies through monitoring a time series of traffic. Using the mean-variance relationship, we determine the traffic aggregation level in traffic monitoring so that it meets two predefined requirements on false positive and false negative ratios simultaneously. The other is an application to load balancing among network equipments that require per-flow management. We utilize the mean-variance relationship for estimating the processing capability required in each network equipment.

Original languageEnglish
Pages (from-to)1560-1576
Number of pages17
JournalComputer Networks
Volume57
Issue number6
DOIs
Publication statusPublished - 2013 Apr 22
Externally publishedYes

Fingerprint

Agglomeration
Monitoring
Resource allocation
Time series
Sampling
Processing

Keywords

  • Mean-variance relationship
  • Number of sampled flows
  • Traffic aggregation
  • Traffic measurement

ASJC Scopus subject areas

  • Computer Networks and Communications

Cite this

Mean-variance relationship of the number of flows in traffic aggregation and its application to traffic management. / Kawahara, Ryoichi; Takine, Tetsuya; Mori, Tatsuya; Kamiyama, Noriaki; Ishibashi, Keisuke.

In: Computer Networks, Vol. 57, No. 6, 22.04.2013, p. 1560-1576.

Research output: Contribution to journalArticle

Kawahara, Ryoichi ; Takine, Tetsuya ; Mori, Tatsuya ; Kamiyama, Noriaki ; Ishibashi, Keisuke. / Mean-variance relationship of the number of flows in traffic aggregation and its application to traffic management. In: Computer Networks. 2013 ; Vol. 57, No. 6. pp. 1560-1576.
@article{d67c9b20f06d47b097178ded354ba7ff,
title = "Mean-variance relationship of the number of flows in traffic aggregation and its application to traffic management",
abstract = "We consider the mean-variance relationship of the number of flows in traffic aggregation, where flows are divided into several groups randomly, based on a predefined flow aggregation index, such as source IP address. We first derive a quadratic relationship between the mean and the variance of the number of flows belonging to a randomly chosen traffic aggregation group. Note here that the result is applicable to sampled flows obtained through packet sampling. We then show that our analytically derived mean-variance relationship fits well those in actual packet trace data sets. Next, we present two applications of the mean-variance relationship to traffic management. One is an application to detecting network anomalies through monitoring a time series of traffic. Using the mean-variance relationship, we determine the traffic aggregation level in traffic monitoring so that it meets two predefined requirements on false positive and false negative ratios simultaneously. The other is an application to load balancing among network equipments that require per-flow management. We utilize the mean-variance relationship for estimating the processing capability required in each network equipment.",
keywords = "Mean-variance relationship, Number of sampled flows, Traffic aggregation, Traffic measurement",
author = "Ryoichi Kawahara and Tetsuya Takine and Tatsuya Mori and Noriaki Kamiyama and Keisuke Ishibashi",
year = "2013",
month = "4",
day = "22",
doi = "10.1016/j.comnet.2013.02.010",
language = "English",
volume = "57",
pages = "1560--1576",
journal = "Computer Networks",
issn = "1389-1286",
publisher = "Elsevier",
number = "6",

}

TY - JOUR

T1 - Mean-variance relationship of the number of flows in traffic aggregation and its application to traffic management

AU - Kawahara, Ryoichi

AU - Takine, Tetsuya

AU - Mori, Tatsuya

AU - Kamiyama, Noriaki

AU - Ishibashi, Keisuke

PY - 2013/4/22

Y1 - 2013/4/22

N2 - We consider the mean-variance relationship of the number of flows in traffic aggregation, where flows are divided into several groups randomly, based on a predefined flow aggregation index, such as source IP address. We first derive a quadratic relationship between the mean and the variance of the number of flows belonging to a randomly chosen traffic aggregation group. Note here that the result is applicable to sampled flows obtained through packet sampling. We then show that our analytically derived mean-variance relationship fits well those in actual packet trace data sets. Next, we present two applications of the mean-variance relationship to traffic management. One is an application to detecting network anomalies through monitoring a time series of traffic. Using the mean-variance relationship, we determine the traffic aggregation level in traffic monitoring so that it meets two predefined requirements on false positive and false negative ratios simultaneously. The other is an application to load balancing among network equipments that require per-flow management. We utilize the mean-variance relationship for estimating the processing capability required in each network equipment.

AB - We consider the mean-variance relationship of the number of flows in traffic aggregation, where flows are divided into several groups randomly, based on a predefined flow aggregation index, such as source IP address. We first derive a quadratic relationship between the mean and the variance of the number of flows belonging to a randomly chosen traffic aggregation group. Note here that the result is applicable to sampled flows obtained through packet sampling. We then show that our analytically derived mean-variance relationship fits well those in actual packet trace data sets. Next, we present two applications of the mean-variance relationship to traffic management. One is an application to detecting network anomalies through monitoring a time series of traffic. Using the mean-variance relationship, we determine the traffic aggregation level in traffic monitoring so that it meets two predefined requirements on false positive and false negative ratios simultaneously. The other is an application to load balancing among network equipments that require per-flow management. We utilize the mean-variance relationship for estimating the processing capability required in each network equipment.

KW - Mean-variance relationship

KW - Number of sampled flows

KW - Traffic aggregation

KW - Traffic measurement

UR - http://www.scopus.com/inward/record.url?scp=84876132260&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84876132260&partnerID=8YFLogxK

U2 - 10.1016/j.comnet.2013.02.010

DO - 10.1016/j.comnet.2013.02.010

M3 - Article

AN - SCOPUS:84876132260

VL - 57

SP - 1560

EP - 1576

JO - Computer Networks

JF - Computer Networks

SN - 1389-1286

IS - 6

ER -