We propose a novel methodology to generate realistic network flow traces to enable systematic evaluation of network monitoring systems in various traffic conditions. Our technique uses a graphbased approach to model the communication structure observed in real-world traces and to extract traffic templates. By combining extracted and user-defined traffic templates, realistic network flow traces that comprise normal traffic and customized conditions are generated in a scalable manner. A proof-of-concept implementation demonstrates the utility and simplicity of our method to produce a variety of evaluation scenarios. We show that the extraction of templates from real-world traffic leads to a manageable number of templates that still enable accurate re-creation of the original communication properties on the network flow level. Categories and Subject Descriptors C.4 [Performance of Systems]: Measurement techniques, Modeling techniques, Performance attributes; C.2.3 [Computer-communication...
Peter Siska, Marc Ph. Stoecklin, Andreas Kind, Tor