科研之友
微信
新浪微博
Facebook
分享链接
摘要
This paper studies the fine-grained traffic identification (FGTI) for better understanding and managing networks. Instead of only indicating which application/protocol that a packet is related to, FGTI maps the traffic packet to a meaningful user behavior or application context. In this paper, we first propose rule organized optimal matching (ROOM), which splits the identification rules into several fields and elaborately organizes the matching order of the fields. As a result, ROOM can only activate the matching operations on a (small) part of the rules that could be possibly hit. We formulate the optimal rule organization problem of ROOM mathematically and demonstrate it to be NP-hard, and then we propose a heuristic algorithm to solve the problem with the time complexity of O(N-2) (N is the number of fields in the rule set). Based on ROOM, we further propose MP-ROOM, which is extended to well support the rules cross multiple protocol data units (PDUs) for traffic identification. In addition, we implement a prototype system including MP-ROOM and related work for evaluations. The evaluations show very promising results: 1.5 similar to 71.3 times throughput improvement is obtained by MP-ROOM in the real system with less than 300-MB memory consumption. With multiple-thread parallel programming, we successfully achieve the throughput over 40 Gb/s for real traces.
- 单位
