Mass purging of stale TCP flows in per-flow monitoring systems

Gunwoo Nam, Pushkar Patankar, George Kesidis, Chita R. Das, Cetin Seren

Research output: Chapter in Book/Report/Conference proceedingConference contribution

3 Scopus citations

Abstract

Timely deletion of a large number of stale sessions monitored by Internet routers, particularly in the presence of SYN floods, is critical to prevent flow table explosion. We investigate two frameworks for purging of stale sessions: "opportunistic" purging that employs a free-list of pointers to memory and "deterministic purging" involving logical swapping of a 1-bit flow enable and touch-bit vectors without requiring a free list. We compare the performance of our algorithms with a stateof- the-art algorithm, namely Finger-Compressed Filter (FCF). Our analysis using Internet traces shows that the deterministic purging, with no purging overhead, is ideal in that it reduces false positive and negative rates as compared to FCF by 52.5% and 59.2%, when the table size is twice the average number of active flows.

Original languageEnglish (US)
Title of host publication2009 Proceedings of 18th International Conference on Computer Communications and Networks, ICCCN 2009
DOIs
StatePublished - 2009
Event2009 18th International Conference on Computer Communications and Networks, ICCCN 2009 - San Francisco, CA, United States
Duration: Aug 3 2009Aug 6 2009

Publication series

NameProceedings - International Conference on Computer Communications and Networks, ICCCN
ISSN (Print)1095-2055

Other

Other2009 18th International Conference on Computer Communications and Networks, ICCCN 2009
CountryUnited States
CitySan Francisco, CA
Period8/3/098/6/09

All Science Journal Classification (ASJC) codes

  • Computer Networks and Communications
  • Hardware and Architecture
  • Software

Fingerprint Dive into the research topics of 'Mass purging of stale TCP flows in per-flow monitoring systems'. Together they form a unique fingerprint.

Cite this