Internet traffic measurement and analysis in a high speed network environment

Workload and flow characteristics

Jae Sung Park, Jai Yong Lee, Sang Bae Lee

Research output: Contribution to journalArticle

9 Citations (Scopus)

Abstract

A study on Internet traffic characterization is essential in designing the next generation Internet. In this paper we characterize the aggregated Internet traffic based on the traffic logs captured from a high speed Internet access network environment. First, we constructed an Internet traffic measurement and analysis system in high-speed Internet access network environment. Then, we analyzed the captured traffic in two ways. First, we analyze general Internet traffic characteristics. In this analysis, we present general work-load characteristics of Internet traffic at each communication protocol layers. We also scrutinize how the behavior of upper layer protocols affects the characteristic of IP packet size. To be more precise in characterizing the aggregated Internet traffic, we analyze the captured traffic according to Internet flow model and show its general characteristics and derive analytic models describing the random variables associated with Internet flow size. In this analysis, we found that Internet flow consists of few packets, especially over 45% flows are composed of only one packet and its size is small and last only a few milliseconds. Even if Internet flows are small in size, most of Internet traffic is carried by small number of long-lived flows or big-sized flows. We also found that Internet flow size follows log-normal distribution which shows burstiness over a wide range of time scales. This is a sharp contrast to commonly made modeling choices that exponential assumptions dominate and show only short-range dependence and it has very close relationship with the self-similarity of the aggregated traffic.

Original languageEnglish
Pages (from-to)287-295
Number of pages9
JournalJournal of Communications and Networks
Volume2
Issue number3
Publication statusPublished - 2000 Sep 1

Fingerprint

HIgh speed networks
Internet
Network protocols
Normal distribution
Random variables

All Science Journal Classification (ASJC) codes

  • Information Systems
  • Computer Networks and Communications

Cite this

@article{0017c88178c641b4b909ac93b6f984f6,
title = "Internet traffic measurement and analysis in a high speed network environment: Workload and flow characteristics",
abstract = "A study on Internet traffic characterization is essential in designing the next generation Internet. In this paper we characterize the aggregated Internet traffic based on the traffic logs captured from a high speed Internet access network environment. First, we constructed an Internet traffic measurement and analysis system in high-speed Internet access network environment. Then, we analyzed the captured traffic in two ways. First, we analyze general Internet traffic characteristics. In this analysis, we present general work-load characteristics of Internet traffic at each communication protocol layers. We also scrutinize how the behavior of upper layer protocols affects the characteristic of IP packet size. To be more precise in characterizing the aggregated Internet traffic, we analyze the captured traffic according to Internet flow model and show its general characteristics and derive analytic models describing the random variables associated with Internet flow size. In this analysis, we found that Internet flow consists of few packets, especially over 45{\%} flows are composed of only one packet and its size is small and last only a few milliseconds. Even if Internet flows are small in size, most of Internet traffic is carried by small number of long-lived flows or big-sized flows. We also found that Internet flow size follows log-normal distribution which shows burstiness over a wide range of time scales. This is a sharp contrast to commonly made modeling choices that exponential assumptions dominate and show only short-range dependence and it has very close relationship with the self-similarity of the aggregated traffic.",
author = "Park, {Jae Sung} and Lee, {Jai Yong} and Lee, {Sang Bae}",
year = "2000",
month = "9",
day = "1",
language = "English",
volume = "2",
pages = "287--295",
journal = "Journal of Communications and Networks",
issn = "1229-2370",
publisher = "Korean Institute of Communication Sciences",
number = "3",

}

Internet traffic measurement and analysis in a high speed network environment : Workload and flow characteristics. / Park, Jae Sung; Lee, Jai Yong; Lee, Sang Bae.

In: Journal of Communications and Networks, Vol. 2, No. 3, 01.09.2000, p. 287-295.

Research output: Contribution to journalArticle

TY - JOUR

T1 - Internet traffic measurement and analysis in a high speed network environment

T2 - Workload and flow characteristics

AU - Park, Jae Sung

AU - Lee, Jai Yong

AU - Lee, Sang Bae

PY - 2000/9/1

Y1 - 2000/9/1

N2 - A study on Internet traffic characterization is essential in designing the next generation Internet. In this paper we characterize the aggregated Internet traffic based on the traffic logs captured from a high speed Internet access network environment. First, we constructed an Internet traffic measurement and analysis system in high-speed Internet access network environment. Then, we analyzed the captured traffic in two ways. First, we analyze general Internet traffic characteristics. In this analysis, we present general work-load characteristics of Internet traffic at each communication protocol layers. We also scrutinize how the behavior of upper layer protocols affects the characteristic of IP packet size. To be more precise in characterizing the aggregated Internet traffic, we analyze the captured traffic according to Internet flow model and show its general characteristics and derive analytic models describing the random variables associated with Internet flow size. In this analysis, we found that Internet flow consists of few packets, especially over 45% flows are composed of only one packet and its size is small and last only a few milliseconds. Even if Internet flows are small in size, most of Internet traffic is carried by small number of long-lived flows or big-sized flows. We also found that Internet flow size follows log-normal distribution which shows burstiness over a wide range of time scales. This is a sharp contrast to commonly made modeling choices that exponential assumptions dominate and show only short-range dependence and it has very close relationship with the self-similarity of the aggregated traffic.

AB - A study on Internet traffic characterization is essential in designing the next generation Internet. In this paper we characterize the aggregated Internet traffic based on the traffic logs captured from a high speed Internet access network environment. First, we constructed an Internet traffic measurement and analysis system in high-speed Internet access network environment. Then, we analyzed the captured traffic in two ways. First, we analyze general Internet traffic characteristics. In this analysis, we present general work-load characteristics of Internet traffic at each communication protocol layers. We also scrutinize how the behavior of upper layer protocols affects the characteristic of IP packet size. To be more precise in characterizing the aggregated Internet traffic, we analyze the captured traffic according to Internet flow model and show its general characteristics and derive analytic models describing the random variables associated with Internet flow size. In this analysis, we found that Internet flow consists of few packets, especially over 45% flows are composed of only one packet and its size is small and last only a few milliseconds. Even if Internet flows are small in size, most of Internet traffic is carried by small number of long-lived flows or big-sized flows. We also found that Internet flow size follows log-normal distribution which shows burstiness over a wide range of time scales. This is a sharp contrast to commonly made modeling choices that exponential assumptions dominate and show only short-range dependence and it has very close relationship with the self-similarity of the aggregated traffic.

UR - http://www.scopus.com/inward/record.url?scp=0041025394&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=0041025394&partnerID=8YFLogxK

M3 - Article

VL - 2

SP - 287

EP - 295

JO - Journal of Communications and Networks

JF - Journal of Communications and Networks

SN - 1229-2370

IS - 3

ER -