Skip to Content
[CAIDA - Center for Applied Internet Data Analysis logo]
Center for Applied Internet Data Analysis > publications : papers : 2001 : StreamsFlowsTorrents
Streams, Flows and Torrents
N. Brownlee and M. Murray, "Streams, Flows and Torrents", in Passive and Active Network Measurement Workshop (PAM), Apr 2001.

This paper extends the RTFM (RFCs 2720-2724) definition of network traffic as bidirectional flows by adding the concepts of streams and torrents. Example analysis demonstrates useful traffic analysis based on collecting flow data for stream-based flow metrics.

|   View full paper:    PDF    DNS root ruleset for UCSD    gzipped postscript    HTML    NeTraMet    Related Presentation    |  Citation:    BibTeX   |

Streams, Flows and Torrents

Nevil Brownlee 1, 2
Margaret Murray 1

CAIDA, San Diego Supercomputer Center, University of California San Diego


IT Systems & Services - ITSS, The University of Auckland

RTFM (RFCs 2720-2724) considers network traffic as being made up of bidirectional flows, which are arbitrary groupings of packets defined only by attributes of their end-points. This paper extends RTFM's view of traffic by adding two further concepts, streams and torrents. Streams are individual IP sessions (e.g. TCP or UDP) between ports on pairs of hosts, while a torrent refers to all traffic on a link.

We present stream measurement work using a meter located at UCSD (University of California, San Diego) to measure response times for DNS requests to the global root and gTLD nameservers. This example shows how to configure NeTraMet to collect flow data for stream-based flow metrics, and demonstrates the usefulness of global DNS response plots for network operations.

Keywords: measurement methodology
  Last Modified: Wed Oct-11-2017 17:03:47 PDT
  Page URL: