Practical Network-Wide Packet Behavior Identification by AP Classifier
Practical Network-Wide Packet Behavior Identification by AP Classifier
复制标题
DOI：
10.1109/tnet.2017.2720637
复制
发表时间：
2017-10
期刊：
影响因子：
--
通讯作者：
Huazhe Wang;Chen Qian;Ye Yu;Hongkun Yang;S. Lam
中科院分区：
文献类型：
--
作者：
Huazhe Wang;Chen Qian;Ye Yu;Hongkun Yang;S. Lam
确定数据包的网络转发行为对于许多网络管理应用程序至关重要，包括规则验证，策略执行，攻击检测，交通工程和故障本地化。当前可以执行数据包行为识别的工具要么会产生大量的时间和内存成本或不支持实时更新。在本文中，我们提出AP分类器，这是用于数据包行为标识的控制平面工具。 AP分类器是基于原子谓词的概念而开发的，该概念可用于表征数据包的转发行为。使用两个真实网络的数据平面网络状态的实验表明，AP分类器的处理速度至少要比现有工具的速度更快。此外，AP分类器使用非常小的内存，并能够支持实时更新。
Identifying the network-wide forwarding behaviors of a packet is essential for many network management applications, including rule verification, policy enforcement, attack detection, traffic engineering, and fault localization. Current tools that can perform packet behavior identification either incur large time and memory costs or do not support real-time updates. In this paper, we present AP Classifier, a control plane tool for packet behavior identification. AP Classifier is developed based on the concept of atomic predicates, which can be used to characterize the forwarding behaviors of packets. Experiments using the data plane network state of two real networks show that the processing speed of AP Classifier is faster than existing tools by at least an order of magnitude. Furthermore, AP Classifier uses very small memory and is able to support real-time updates.