Ecole d'ingénieur et centre de recherche en Sciences du numérique

Detecting and profiling TCP connections experiencing abnormal performance

Hafsaoui, Aymen; Urvoy-Keller, Guillaume; Siekkinen, Matti; Collange, Denis

TMA 2012, 4th International Workshop on Traffic Monitoring and Analysis, March 12-14, 2012, Vienna, Austria /Also published in LNCS, Springer, 2012, Volume 7189/2012

We study functionally correct TCP connections - normal set-up, data transfer and tear-down - that experience lower than normal performance in terms of delay and throughput. Several factors, including packet loss or application behavior, may lead to such abnormal performance. We present a methodology to detect TCP connections with such abnormal performance from packet traces recorded at a single vantage point. Our technique decomposes a TCP transfer into periods where: (i) TCP is recovering from losses, (ii) the client or the server are thinking or preparing data, respectively, or (iii) the data is sent but at an abnormally low rate. We apply this methodology to several traces containing traffic from FTTH, ADSL, and Cellular access networks. We discover that regardless of the access technology type, packet loss dramatically degrades performance as TCP is rarely able to rely on Fast Retransmit to recover from losses. However, we also find out that the TCP timeout mechanism has been optimized in Cellular networks as compared to ADSL/FTTH technologies. Concerning loss-free periods, our technique exposes various abnormal performance, some being benign, with no impact on user, e.g., p2p or instant messaging applications, and some that are more critical, e.g., HTTPS sessions.

Document Doi Hal Bibtex

Titre:Detecting and profiling TCP connections experiencing abnormal performance
Type:Conférence
Langue:English
Ville:Vienna
Pays:AUTRICHE
Date:
Département:Sécurité numérique
Eurecom ref:3616
Copyright: © Springer. Personal use of this material is permitted. The definitive version of this paper was published in TMA 2012, 4th International Workshop on Traffic Monitoring and Analysis, March 12-14, 2012, Vienna, Austria /Also published in LNCS, Springer, 2012, Volume 7189/2012 and is available at : http://dx.doi.org/10.1007/978-3-642-28534-9_12
Bibtex: @inproceedings{EURECOM+3616, doi = {http://dx.doi.org/10.1007/978-3-642-28534-9_12 }, year = {2012}, title = {{D}etecting and profiling {TCP} connections experiencing abnormal performance}, author = {{H}afsaoui, {A}ymen and {U}rvoy-{K}eller, {G}uillaume and {S}iekkinen, {M}atti and {C}ollange, {D}enis}, booktitle = {{TMA} 2012, 4th {I}nternational {W}orkshop on {T}raffic {M}onitoring and {A}nalysis, {M}arch 12-14, 2012, {V}ienna, {A}ustria /{A}lso published in {LNCS}, {S}pringer, 2012, {V}olume 7189/2012}, address = {{V}ienna, {AUTRICHE}}, month = {03}, url = {http://www.eurecom.fr/publication/3616} }
Voir aussi: