TY - GEN
T1 - Mass purging of stale TCP flows in per-flow monitoring systems
AU - Nam, Gunwoo
AU - Patankar, Pushkar
AU - Kesidis, George
AU - Das, Chita R.
AU - Seren, Cetin
PY - 2009
Y1 - 2009
N2 - Timely deletion of a large number of stale sessions monitored by Internet routers, particularly in the presence of SYN floods, is critical to prevent flow table explosion. We investigate two frameworks for purging of stale sessions: "opportunistic" purging that employs a free-list of pointers to memory and "deterministic purging" involving logical swapping of a 1-bit flow enable and touch-bit vectors without requiring a free list. We compare the performance of our algorithms with a stateof- the-art algorithm, namely Finger-Compressed Filter (FCF). Our analysis using Internet traces shows that the deterministic purging, with no purging overhead, is ideal in that it reduces false positive and negative rates as compared to FCF by 52.5% and 59.2%, when the table size is twice the average number of active flows.
AB - Timely deletion of a large number of stale sessions monitored by Internet routers, particularly in the presence of SYN floods, is critical to prevent flow table explosion. We investigate two frameworks for purging of stale sessions: "opportunistic" purging that employs a free-list of pointers to memory and "deterministic purging" involving logical swapping of a 1-bit flow enable and touch-bit vectors without requiring a free list. We compare the performance of our algorithms with a stateof- the-art algorithm, namely Finger-Compressed Filter (FCF). Our analysis using Internet traces shows that the deterministic purging, with no purging overhead, is ideal in that it reduces false positive and negative rates as compared to FCF by 52.5% and 59.2%, when the table size is twice the average number of active flows.
UR - http://www.scopus.com/inward/record.url?scp=70449083236&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=70449083236&partnerID=8YFLogxK
U2 - 10.1109/ICCCN.2009.5235390
DO - 10.1109/ICCCN.2009.5235390
M3 - Conference contribution
AN - SCOPUS:70449083236
SN - 9781424445813
T3 - Proceedings - International Conference on Computer Communications and Networks, ICCCN
BT - 2009 Proceedings of 18th International Conference on Computer Communications and Networks, ICCCN 2009
T2 - 2009 18th International Conference on Computer Communications and Networks, ICCCN 2009
Y2 - 3 August 2009 through 6 August 2009
ER -