TimeAudit: Blind dissection and analysis of transaction delays in enterprise networks

Hafsaoui, Aymen; Urvoy-Keller, Guillaume; Siekkinen, Matti
ITC 2014, 26th International Teletraffic Congress, September 9th-11th, 2014, Karlskrona, Sweden

Transaction delay is in many cases the most important performance metric of networked applications because it is a manifestation of both network and end host (client or server) performance and it often directly reflects the user experien ce. We introduce TimeAudit, a tool for enterprise network administrators that analyzes transaction delays from TCP/IP packet header traces. TimeAudit computes the transaction delays and dissects them into client, server, and network related parts, and in this way enables drilling down to the origins of the application-level performance of services. Furthermore, it applies statistical analysis to reveal patterns and anomalies from the delay data. TimeAudit relies solely on the behavior of TCP and, unlike SNMP-based management tools, for instance, it does the analysis "blindly" requiring no explicit knowledge of the applications whose traffic it analyzes. We apply it to a traffic trace captured at an enterprise network of 345 hosts and 56 servers. This exercise demonstrates that it is able to pinpointing performance trouble spots so that the enterprise network admin could take further action.

DOI
HAL
Type:
Conférence
City:
Karlskrona
Date:
2014-09-09
Department:
Sécurité numérique
Eurecom Ref:
4430
Copyright:
© 2014 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.
See also:

PERMALINK : https://www.eurecom.fr/publication/4430