Design and evaluation of http protocol parsers for ipfix measurement

P Velan, T Jirsík, P Čeleda - … Networking: 19th EUNICE/IFIP WG 6.6 …, 2013 - Springer
Advances in Communication Networking: 19th EUNICE/IFIP WG 6.6 International …, 2013Springer
In this paper we analyze HTTP protocol parsers that provide a web traffic visibility to IP flow.
Despite extensive work, flow meters generally fall short of performance goals due to
extracting application layer data. Constructing effective protocol parser for in-depth analysis
is a challenging and error-prone affair. We designed and evaluated several HTTP protocol
parsers representing current state-of-the-art approaches used in today's flow meters. We
show the packet rates achieved by respective parsers, including the throughput decrease …
Abstract
In this paper we analyze HTTP protocol parsers that provide a web traffic visibility to IP flow. Despite extensive work, flow meters generally fall short of performance goals due to extracting application layer data. Constructing effective protocol parser for in-depth analysis is a challenging and error-prone affair. We designed and evaluated several HTTP protocol parsers representing current state-of-the-art approaches used in today’s flow meters. We show the packet rates achieved by respective parsers, including the throughput decrease (performance implications of application parser) which is of the utmost importance for high-speed deployments. We believe that these results provide researchers and network operators with important insight into application visibility and IP flow.
Springer