Enabling high-speed and extensible real-time communications monitoring

Fusco, Francesco; Huici, Felipe; Deri, Luca; Niccolini, Saverio; Ewald, Thilo

doi:10.1109/inm.2009.5188834

Cited by 12 publications

(11 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Each polling thread fetches incoming packet(s) from the corresponding RX queue, and, passes the packet to PF RING. Inside PF RING, packet processing involves packet parsing and, depending on the configuration, may include packet filtering using the popular BPF filters [5] or even more complex application level filtering mechanisms [16]. Kernel level packet processing is performed by polling threads in parallel.…”

Section: Towards Multi-core Monitor-ing Architecturesmentioning

confidence: 99%

High speed network traffic analysis with commodity multi-core systems

Fusco

Deri²

2010

Proceedings of the 10th ACM SIGCOMM Conference on Internet Measurement

Self Cite

132

View full text Add to dashboard Cite

Multi-core systems are the current dominant trend in computer processors. However, kernel network layers often do not fully exploit multi-core architectures. This is due to issues such as legacy code, resource competition of the RXqueues in network interfaces, as well as unnecessary memory copies between the OS layers. The result is that packet capture, the core operation in every network monitoring application, may even experience performance penalties when adapted to multi-core architectures. This work presents common pitfalls of network monitoring applications when used with multi-core systems, and presents solutions to these issues. We describe the design and implementation of a novel multi-core aware packet capture kernel module that enables monitoring applications to scale with the number of cores. We showcase that we can achieve high packet capture performance on modern commodity hardware.

show abstract

Section: Towards Multi-core Monitor-ing Architecturesmentioning

confidence: 99%

High speed network traffic analysis with commodity multi-core systems

Fusco

Deri²

2010

Proceedings of the 10th ACM SIGCOMM Conference on Internet Measurement

Self Cite

132

View full text Add to dashboard Cite

show abstract

“…Filtering rules can specify a plugin id, thus packets matching such a rule are then passed to the specified plugin for further processing. So far, PF RING plugins include support for VoIP (Voice Over IP) [14], HTTP, and multimedia streaming.…”

Section: A Programmable Network Monitoring Frameworkmentioning

confidence: 99%

“…As of today, the PF RING framework has been successfully used for simplifying the development of complex and yet efficient monitoring software for real-time services [14] and HTTP-based applications. The performance evaluation of the filtering infrastructure can be found in [10], whereas [9] reports the packet capture performance.…”

Section: Using Pf Ring For Network Service Monitoringmentioning

confidence: 99%

Towards Monitoring Programmability in Future Internet: Challenges and Solutions

Deri¹,

Fusco²,

Gasparakis³

2011

Trustworthy Internet

Self Cite

View full text Add to dashboard Cite

Internet is becoming a global IT infrastructure serving interactive and real-time services ubiquitously accessible by heterogeneous network-enabled devices. In the Internet of Services (IoS) era, monitoring infrastructures must provide to network operators fine-grained service-specific information which can be derived by dissecting application level protocols. To accommodate these new monitoring requirements network probes must be flexible, easy to extend and still be capable of analyzing high-speed network streams. Despite the increased complexity, software and hardware technologies on top of which network probes are implemented have been designed when monitoring requirements were substantially different and almost left unchanged. As a result, implementing modern probes is challenging and time consuming. In this paper we identify desirable features for reducing the work required to develop complex probes, and we present a home-grown comprehensive software framework that significantly simplifies the creation of service-oriented monitoring applications.

show abstract

“…In [9] we describe a traffic filtering mechanism that, contrary to BPF, can be reconfigured in real-time and scale in terms of number of traffic filtering rules. In [10] we present a traffic filtering and analysis framework named RTC-Mon that substantially simplifies the development of modular and efficient traffic monitoring applications. The core of the framework is a rule-based infrastructure that allows traffic analysis components to be enabled over the traffic matching rules.…”

Section: Motivation and Scope Of Workmentioning

confidence: 99%

Wire-Speed Hardware-Assisted Traffic Filtering with Mainstream Network Adapters

Deri¹,

Gasparakis

Waskiewicz³

et al. 2010

Advances in Network-Embedded Management and Applications

Self Cite

View full text Add to dashboard Cite

Abstract. Modern computer architectures are founded on multi-core processors. In order to efficiently process network traffic, it is necessary to dynamically split high-speed packet streams across cores based on the monitoring goal. Most network adapters are multi-core aware but offer limited facilities for assigning packets to processor cores. In this paper we introduce a hybrid traffic analysis framework that leverages flexible packet balancing mechanisms available on recent 10 Gbit commodity network adapters not yet exploited by operating systems. The main contribution of this paper is an open source hardware-assisted software layer for dynamically configuring packet balancing policies in order to fully exploit multi-core systems and enable 10 Gbit wire-speed network traffic analysis.

show abstract

Enabling high-speed and extensible real-time communications monitoring

Cited by 12 publications

References 10 publications

High speed network traffic analysis with commodity multi-core systems

High speed network traffic analysis with commodity multi-core systems

Towards Monitoring Programmability in Future Internet: Challenges and Solutions

Wire-Speed Hardware-Assisted Traffic Filtering with Mainstream Network Adapters

Contact Info

Product

Resources

About