Network DVR: A Programmable Framework for Application-Aware Trace Collection

Network traces are essential for a wide range of network applications, including traffic analysis, network measurement, performance monitoring, and security analysis. Existing capture tools do not have sufficient built-in intelligence to understand these application requirements. Consequently, they are forced to collect all packet traces that might be useful at the finest granularity to meet a certain level of accuracy requirement. It is up to the network applications to process the per-flow traffic statistics and extract meaningful information. But for a number of applications, it is much more efficient to record packet sequences for flows that match some application-specific signatures, specified using for example regular expressions. A basic approach is to begin memory-copy (recording) when the first character of a regular expression is matched. However, often times, a matching eventually fails, thus consuming unnecessary memory resources during the interim. In this paper,...

• Type: Conference
• Year: 2010
• Where: PAM
• Authors: Chia-Wei Chang, Alexandre Gerber, Bill Lin, Subhabrata Sen, Oliver Spatscheck
• Keywords: Computer Networks, Network Applications, Network DVR, PAM 2010, first Character