Multi-Gbps HTTP traffic analysis in commodity hardware based on local knowledge of TCP streams

详细信息    查看全文

• 作者：Carlos Vega ; ^{carlosgonzalo.vega@predoc.uam.es} ; ^{carlosgonzalo.vega@estudiante.uam.es}Author Vitae ; Paula Roquero ^{paula.roquero@uam.es}Author Vitae ; Javier Aracil ^{javier.aracil@uam.es}Author Vitae
• 关键词：HTTP ; Traffic analysis ; High speed analysis
• 刊名：Computer Networks
• 出版年：2017
• 出版时间：11 February 2017
• 年：2017
• 卷：113
• 期：Complete
• 页码：258-268
• 全文大小：4087 K
• 卷排序：113

文摘

In this paper we propose and implement novel techniques for performance evaluation of web traffic (response time, response code, etc.), with no reassembly of the underlying TCP connection, which severely restricts the traffic analysis throughput. Furthermore, our proposed software for HTTP traffic analysis runs in standard hardware, which is very cost-effective. Besides, we present sub-TCP connection load balancing techniques that significantly increase throughput at the expense of losing very few HTTP transactions. Such techniques provide performance evaluation statistics which are indistinguishable from the single-threaded alternative with full TCP connection reassembly.