摘要

Passive traffic measurement increasingly employs packet sampling to control the consumption of resources involved. However, knowing the number and length of the unsampled flows remains useful for characterizing traffic and the resources required to accommodate its demands. This paper provides a method that uses flow statistics formed from sampled packet stream to infer the absolute frequencies of lengths of flows in the unsampled stream. First, a flow is classified as small or large flow based on the probability that no packet is sampled. Then we present different estimation methods for them through statistical inference. We also investigate the impact on our results of different packet sampling rate. The theoretical analysis demonstrates that the computational complexity is well under control, and the experiment results show the inferred distributions are accurate in most cases.