ksniffer: Determining the Remote Client Perceived Response Time from Live Packet Streams

As dependence on the World Wide Web continues to grow, so does the need for businesses to have quantitative measures of the client perceived response times of their Web services. We present ksniffer, a kernel-based traffic monitor capable of determining pageview response times as perceived by remote clients, in real-time at gigabit traffic rates. ksniffer is based on novel, online mechanisms that take a "look once, then drop" approach to packet analysis to reconstruct TCP connections and learn client pageview activity. These mechanisms are designed to operate accurately with live network traffic even in the presence of packet loss and delay, and can be efficiently implemented in kernel space. This enables ksniffer to perform analysis that exceeds the functionality of current traffic analyzers while doing so at high bandwidth rates. ksniffer requires only to passively monitor network traffic and can be integrated with systems that perform server management to achieve specifie...

• Type: Conference
• Year: 2004
• Where: OSDI
• Authors: David P. Olshefski, Jason Nieh, Erich M. Nahum
• Keywords: Current Traffic Analyzers, Operating System, OSDI 2004, Response Times, World Wide Web