Skip to Content
[CAIDA - Center for Applied Internet Data Analysis logo]
Center for Applied Internet Data Analysis
A parameterizable methodology for Internet traffic flow profiling
k. claffy, H. Braun, and G. Polyzos, "A parameterizable methodology for Internet traffic flow profiling", IEEE Journal on Selected Areas in Communications, vol. 13, no. 8, pp. 1481--94, Mar 1995.
|   View full paper:    PDF    |  Citation:    BibTeX    Resource Catalog   |

A parameterizable methodology for Internet traffic flow profiling

kc claffy1
Hans-Werner Braun1
George Polyzos2

National Laboratory for Applied Network Research - NLANR, San Diego Supercomputer Center, University of California, San Diego


University of California, San Diego (UCSD)

We present a parametrizable methodology for profiling Internet traffic flows at a variety of granularities. Our methodology differs from many previous studies that have concentrated on end-point definitions of flows in terms of state derived from observing the explicit opening and closing of TCP connections.

Instead, our model defines flows based on traffic satisfying various temporal and spatial locality conditions, as observed at internal points of the network. This approach to flow characterization helps address some central problems in networking based on the Internet model. Among them are route caching, resource reservation at multiple service levels, usage based accounting, and the integration of IP traffic over an ATM fabric. We first define the parameter space and then concentrate on metrics characterizing both individual flows as well as the aggregate flow profile. We consider various granularities of the definition of a flow, such as by destination network, host-pair, or host and port quadruple. We include some measurements based on case studies we undertook, which yield significant insights into some aspects of Internet traffic, including demonstrating (i) the brevity of a significant fraction of IP flows at a variety of traffic aggregation granularities, (ii) that the number of host-pair IP flows is not significantly larger than the number of destination network flows, and (iii) that schemes for caching traffic information could significantly benefit from using application information.

Keywords: measurement methodology, passive data analysis
  Last Modified: Tue Nov-17-2020 04:46:44 UTC
  Page URL: