Method of data compression for traffic monitoring

In this paper a problem of compressing data containing information on basic parameters of network traffic is considered. Six test sets with different types of network traffic for known monitoring tool Wireshark are formed. Analysis of compression efficiency for these datasets by widely used archivers is carried out. It is shown that the main part of memory in compressed data relates to timestamps. A method for compressing timestamps that consists in delta calculation, Burrows-Wheeler transform (BWT), distance coding (DC) and recursive group coding (RGC) at the final stage is proposed. It is demonstrated that the use of RGC at the final stage provides more efficient coding compared to known methods. It is also shown that the proposed method of timestamps coding produces about twice larger compression ratio than WinRar.