Traffic monitoring and analysis : first international workshop, TMA 2009, Aachen, Germany, May 11, 2009 : proceedings

"This book constitutes the proceedings of the First International Workshop on Traffic Monitoring and Analysis, TMA 2008, held in Aachen, Germany, on May 11, 2008 in conjunction with the IFIP Networking 2008 conference. The workshop is an initiative from the COST Action IC0703 "Data Traffic Monitoring and Analysis: Theory, Techniques, Tools and Applications for the Future Networks". The 15 papers contained in this volume were carefully reviewed and selected from 34 submissions. They encompass research areas related to traffic analysis and classification, measurements, topology, discovery, detection of specific applications and events, packet inspection, and traffic inference. The papers are organized in topical sections on QoS measurement, rupture detection, traffic classification, as well as traffic analysis and topology measurements."--Publisher's website The First International Workshop on Traffic Monitoring and Analysis (TMA 2009) was an initiative from the COST Action IC0703 "Data Traffic Monitoring and Analysis: Theory, Techniques, Tools and Applications for the Future Networks" (www.cost-tma.eu). The COST program is an intergovernmental framework for European Cooperation in Science and Technology, allowing the coordination of nationally funded research on a European level. Each COST Action contributes to reducing the fragmentation in research and opening the European Research Area to cooperation worldwide. Traffic monitoring and analysis (TMA) is now an important research topic within the field of networking. It involves many research groups worldwide that are coll- tively advancing our understanding of the Internet. The importance of TMA research is motivated by the fact that modern packet n- works are highly complex and ever-evolving objects. Understanding, developing and managing such environments is difficult and expensive in practice. Traffic monitoring is a key methodology for understanding telecommunication technology and improving its operation, and the recent advances in this field suggest that evolved TMA-based techniques can play a key role in the operation of real networks. Moreover, TMA offers a basis for prevention and response in network security, as typically the det- tion of attacks and intrusions requires the analysis of detailed traffic records. On the more theoretical side, TMA is an attractive research topic for many reasons. Front Matter....Pages - Realistic Passive Packet Loss Measurement for High-Speed Networks....Pages 1-7 Inferring Queue State by Measuring Delay in a WiFi Network....Pages 8-16 Network-Wide Measurements of TCP RTT in 3G....Pages 17-25 Portscan Detection with Sampled NetFlow....Pages 26-33 Automated Detection of Load Changes in Large-Scale Networks....Pages 34-41 Passive, Streaming Inference of TCP Connection Structure for Network Server Management....Pages 42-53 GTVS: Boosting the Collection of Application Traffic Ground Truth....Pages 54-63 TIE: A Community-Oriented Traffic Classification Platform....Pages 64-74 Revealing the Unknown ADSL Traffic Using Statistical Methods....Pages 75-83 Accurate, Fine-Grained Classification of P2P-TV Applications by Simply Counting Packets....Pages 84-92 Detection and Tracking of Skype by Exploiting Cross Layer Information in a Live 3G Network....Pages 93-100 Incentives for BGP Guided IP-Level Topology Discovery....Pages 101-108 Scaling Analysis of Wavelet Quantiles in Network Traffic....Pages 109-116 KISS: Stochastic Packet Inspection....Pages 117-125 DTS: A Decentralized Tracing System....Pages 126-134 Back Matter....Pages -