Traffic measurement is a critical component for the control and engineering of communication networks. We argue that traffic measurement should make it possible to obtain the spatial flow of traffic through the domain, i.e., the paths followed by packets between any ingress and egress point of the domain. Most resource allocation and capacity planning tasks can benefit from such information. Also, traffic measurements should be obtained without a routing model and without knowledge of network state. This allows the traffic measurement process to be resilient to network failures and state uncertainty. We propose a method that allows the direct inference of traffic flows through a domain by observing the trajectories of a subset of all packets traversing the network. The key advantages of the method are that (i) it does not rely on routing state, (ii) its implementation cost is small, and (iii) the measurement reporting traffic is modest and can be controlled precisely. The key idea of the method is to sample packets based on a hash function computed over the packet content. Using the same hash function will yield the same sample set of packets in the entire domain, and enables us to reconstruct packet trajectories. I.

Network routers occupy a key role in modern data transport and consequently are attractive targets for attackers. By manipulating, diverting or dropping packets arriving at a compromised router, an attacker can trivially mount denial-of-service, surveillance or man-in-the-middle attacks on end host systems. In this paper, we specify the problem of detecting routers with incorrect packet forwarding behavior and we explore the design space of protocols that implement such a detector. We further present a concrete protocol that is inexpensive enough for practical implementation at scale.

This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited. IESG Note This document is not an IETF Internet Standard. It represents the individual opinion(s) of one or more members of the TMRG Research

To make a scalable and lightweight QoS monitoring system, we have proposed a new QoS monitoring technique, Change-of-Measure based Passive/Active Monitoring (CoMPACT Monitor), which is based on change-of-measure framework and is an active measurement transformed by using passively monitored data. This technique enables us to measure detailed QoS information for individual users, applications, and organizations, in a scalable and lightweight manner. In this paper, we present the mathematical foundation of CoMPACT Monitor. In addition, we show its characteristics through simulations in terms of typical implementation issues for inferring the delay distributions. The results show that CoMPACT Monitor gives accurate QoS estimations with only a small amount of extra traffic for active measurement.

The theme of this thesis is the enhancement of current IP backbone provisioning practices in the presence of additional network measurements. Current practices are heavily dependent on the intuition of the human operators. Traffic variability, scalability issues, lack of monitoring information, and complex interactions between inter- and intra-domain routing protocols result in network management techniques that usually rely on trial and error. In contrast with reductionist approaches, we demonstrate the benefits of using different types of monitoring information in the formalisation of different network provisioning tasks, and provide a methodological framework for their analysis.

The following paper is focussed on the CM Toolset distributed measurement toolkit and its use in AQUILA European IST project for scalable end-to-end QoS based networking. CM Toolset is integrated in AQUILA intra-domain QoS measurement architecture including QoS database and distributed measurement agents, traffic flow generation and active probing tools as well as router performance monitoring.

This memo describes a detailed framework for composing and aggregating metrics (both in time and in space) originally defined by the IP Performance Metrics (IPPM), RFC 2330, and developed by the IETF. This new framework memo describes the generic composition and aggregation mechanisms. The memo provides a basis for additional documents that implement the framework to define detailed compositions and aggregations of metrics that are useful in practice. Status of This Memo This document is not an Internet Standards Track specification; it is published for informational purposes. This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Not all documents approved by the IESG are a candidate for any level of Internet Standard; see Section 2 of RFC 5741. Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at

Currently, there are many network monitoring tools available to measure a wide variety of network characteristics. For example, there are tools to measure network capacity, available bandwidth, delay, loss, topology, and so on. There are also a number of communities that wish to have a programmatic API for accessing the

This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited. Copyright Notice Copyright (c) 2009 IETF Trust and the persons identified as the

This memo reclassifies RFC 4148, "IP Performance Metrics (IPPM)