LDR | | 00000nam u2200205 4500 |
001 | | 000000433015 |
005 | | 20200225111120 |
008 | | 200131s2019 ||||||||||||||||| ||eng d |
020 | |
▼a 9781088374573 |
035 | |
▼a (MiAaPQ)AAI22592163 |
040 | |
▼a MiAaPQ
▼c MiAaPQ
▼d 247004 |
082 | 0 |
▼a 004 |
100 | 1 |
▼a Michel, Oliver. |
245 | 10 |
▼a Packet-Level Network Telemetry and Analytics. |
260 | |
▼a [S.l.]:
▼b University of Colorado at Boulder.,
▼c 2019. |
260 | 1 |
▼a Ann Arbor:
▼b ProQuest Dissertations & Theses,
▼c 2019. |
300 | |
▼a 137 p. |
500 | |
▼a Source: Dissertations Abstracts International, Volume: 81-03, Section: B. |
500 | |
▼a Advisor: Keller, Eric. |
502 | 1 |
▼a Thesis (Ph.D.)--University of Colorado at Boulder, 2019. |
506 | |
▼a This item must not be sold to any third party vendors. |
520 | |
▼a Continuous monitoring is an essential part of the operation of computer networks. High-fidelity monitoring data can be used to detect security issues, misconfigurations, equipment failure, or to perform traffic engineering. With networks growing in complexity, traffic volume, and facing more complex attacks, the need for continuous and precise monitoring is greater than ever before. Existing SNMP or NetFlow based approaches are not suited for these new challenges as they compromise on flexibility, fidelity, and performance. These compromises are a result of the assumption that analytics software cannot scale to high traffic rates.In this work, we look holistically at the requirements and challenges in network monitoring and present an architecture consisting of integrated telemetry, analytics, and record persistence components. By finding the right balance between responsibilities of hardware and software, we demonstrate that flexible and high-fidelity network analytics at high rates is indeed possible.Our system includes a packet-level, analytics-aware telemetry component in the data plane that runs at line-rates of several Terabits per second and tightly integrates with a flexible software network analytics platform. Operators can interact with this system through a time series database interface that also provides record persistence. We implement a full prototype of our system called Toccoa which can process approximately 80 million packets per 16-core commodity server for a wide variety of monitoring applications and scales linearly with server count. |
590 | |
▼a School code: 0051. |
650 | 4 |
▼a Computer science. |
690 | |
▼a 0984 |
710 | 20 |
▼a University of Colorado at Boulder.
▼b Computer Science. |
773 | 0 |
▼t Dissertations Abstracts International
▼g 81-03B. |
773 | |
▼t Dissertation Abstract International |
790 | |
▼a 0051 |
791 | |
▼a Ph.D. |
792 | |
▼a 2019 |
793 | |
▼a English |
856 | 40 |
▼u http://www.riss.kr/pdu/ddodLink.do?id=T15493220
▼n KERIS
▼z 이 자료의 원문은 한국교육학술정보원에서 제공합니다. |
980 | |
▼a 202002
▼f 2020 |
990 | |
▼a ***1008102 |
991 | |
▼a E-BOOK |