internet traffic measurement research @...

20
Internet Traffic Measurement Research @ DNLAB Youngseok Lee [email protected] [email protected] 1

Upload: others

Post on 19-Aug-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

Internet Traffic Measurement Research @ DNLAB Youngseok Lee

[email protected]

[email protected]

1

Page 2: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

Introduction

• Dept of Computer Engineering in Chungnam National University, Korea• http://cse.cnu.ac.kr

• Data Networks Lab (http://networks.cnu.ac.kr )• People: 1 Prof, 1 Phd student and 7 master students• Research interests

• Internet measurement and big data analysis

2

Page 3: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

Previous Research Projects

• Traffic engineering• "Traffic Engineering in Next-Generation Optical Networks”, IEEE Com

munication Survey and Tutorial, 2004.• "Traffic Engineering-Aware Shortest-path Routing and its Application

in IP-over-WDM Networks", OSA Journal of Optical Networking, 2004.

• IP packet measurement with Hadoop• IP geolocation database

3

Page 4: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

Internet Measurement

• Challenges• Scalability, fault-tolerant system, extensibility

• CAIDA data• Capture, Curation, Storage, Search, Sharing, Analysis, and

Visualization• Ark topology: 1.8 TB• Telescope: 102 TB• Packet headers: 18.8 TB

4

JoshPolterock,“CAIDA:ADataSharingCaseStudy,”SecurityattheCyberBorder:ExploringCybersecurity forInternational ResearchNetworkConnectionsworkshop, 2012

Page 5: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

• 1 PB sorting by Google• 2008: 6 hours and 2 minutes on

4,000 computers • 2011: 33 minutes on 8000

computers• 2011: 10PB, 8000 computers, 6

hours and 27 minutes

Harness Distributed Computing and Storage ?

Google MapReduce, 2004 Apache Hadoop project

5

Page 6: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

Our Proposal

6

NetFlow v5

Packet

Administrator

Slave

Master

TrafficCollector

WebVisualizer/Hive

PcapI/O

NetFlowI/O

TrafficAnalysisMapper &Reducer

TrafficAnalyzer

HDFS Hadoop

BinI/O

Hadoop-basedTrafficMeasurementandAnalysisPlatform

1. Yeonhee LeeandYoungseok Lee,"TowardsScalableInternetTrafficMeasurementandAnalysis withHadoop,"ACMSIGCOMMComputerCommunicationReview(CCR),Jan.2013

2. Yeonhee LeeandYoungseok Lee“AHadoop-basedPacketTraceProcessingTool”,TMA,April20113. Yeonhee LeeandYoungseok Lee,"DetectingDDoS AttackswithHadoop",ACMCoNEXT Student

Workshop,Dec,2011

Page 7: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

Toward Scalable Internet Traffic Measurement and Analysis with Hadoop, ACM SIGCOMM CCR, Jan 2013

• To develop IP packet measurement system with Hadoop

7

Page 8: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

Our Tool

8

Page 9: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

9

Page 10: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

IP Geolocation with a Crowd-sourcing Broadband Performance Tool, ACM SIGCOMM CCR, Jan. 2016

• Build Korean IP geolocation DB with crowd-sourcing broadband performance data over 6 years

10

Page 11: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

How to build IP geolocation DB

11

Page 12: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

Accuracy

12

Page 13: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

Ongoing Research Projects

• Mobile app performance speed measurement platform• IP packet measurement with Android VPN• ToR crawling• Privacy examination in the web community

13

Page 14: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

Mobile App Speed?

• Quality of Experience (QoE) for Mobile Apps

14

Page 15: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

App Speed Measurement System

15

Page 16: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

16

Page 17: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

17

Page 18: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

18

Page 19: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

Discussion

• Accuracy of mobile app speed index• Usages of mobile app speed measurement• Know which factors make mobile apps slow/fast?

• Large-scale experiment with automated app files• login

19

Page 20: Internet Traffic Measurement Research @ DNLABnetworks.cs.ucdavis.edu/presentation2017/YSLee-08-04-2017.pdf · 8/4/2017  · •1 PB sorting by Google •2008: 6 hours and 2 minutes

University of California, Davis

Big Data Analysis of Computer Networks and SecurityDate : August 4 2017 Venue : Dept. of Computer Science, University of California, Davis

20