DocumentCode :
2976385
Title :
Scaling data-plane logging in large scale networks
Author :
Arefin, Ahsan ; Khurshid, Ahmed ; Caesar, Matthew ; Nahrstedt, Klara
Author_Institution :
Dept. of Comput. Sci., Univ. of Illinois at Urbana-Champaign, Urbana, IL, USA
fYear :
2011
fDate :
7-10 Nov. 2011
Firstpage :
1308
Lastpage :
1314
Abstract :
Understanding and troubleshooting wide area networks (such as military backbone networks and ISP networks) are challenging tasks due to their large, distributed, and highly dynamic nature. Building a system that can record and replay fine-grained behaviors of such networks would simplify this problem by allowing operators to recreate the sequence and precise ordering of events (e.g., packet-level forwarding decisions, route changes, failures) taking place in their networks. However, doing this at large scales seems intractable due to the vast amount of information that would need to be logged. In this paper, we propose a scalable and reliable framework to monitor fine-grained data-plane behavior within a large network. We give a feasible architecture for a distributed logging facility, a tree-based data structure for log compression and show how this logged information helps network operators to detect and debug anomalous behavior of the network. Experimental results obtained through trace-driven simulations and Click software router experiments show that our design is lightweight in terms of processing time, memory requirement and control overhead, yet still achieves over 99% precision in capturing network events.
Keywords :
program debugging; security of data; tree data structures; wide area networks; Click software router; ISP networks; anomalous network behavior debugging; anomalous network behavior detection; control overhead; data-plane logging; distributed logging facility; failures; fine-grained behaviors; fine-grained data-plane behavior; large scale networks; log compression; logged information; memory requirement; military backbone networks; packet-level forwarding decisions; route changes; trace-driven simulations; tree-based data structure; wide area networks; Data structures; Gold; Monitoring; Nonvolatile memory; Random access memory; Reliability; Timing;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
MILITARY COMMUNICATIONS CONFERENCE, 2011 - MILCOM 2011
Conference_Location :
Baltimore, MD
ISSN :
2155-7578
Print_ISBN :
978-1-4673-0079-7
Type :
conf
DOI :
10.1109/MILCOM.2011.6127483
Filename :
6127483
Link To Document :
بازگشت