Multi-Gbps HTTP traffic analysis in commodity hardware based on local knowledge of TCP streams

Carlos Vega*, Paula Roquero, Javier Aracil

*Corresponding author for this work

Research output: Contribution to journalArticleResearchpeer-review

11 Citations (Scopus)

Abstract

In this paper we propose and implement novel techniques for performance evaluation of web traffic (response time, response code, etc.), with no reassembly of the underlying TCP connection, which severely restricts the traffic analysis throughput. Furthermore, our proposed software for HTTP traffic analysis runs in standard hardware, which is very cost-effective. Besides, we present sub-TCP connection load balancing techniques that significantly increase throughput at the expense of losing very few HTTP transactions. Such techniques provide performance evaluation statistics which are indistinguishable from the single-threaded alternative with full TCP connection reassembly.

Original languageEnglish
Pages (from-to)258-268
Number of pages11
JournalComputer Networks
Volume113
DOIs
Publication statusPublished - 11 Feb 2017
Externally publishedYes

Keywords

  • HTTP
  • High speed analysis
  • Traffic analysis

Fingerprint

Dive into the research topics of 'Multi-Gbps HTTP traffic analysis in commodity hardware based on local knowledge of TCP streams'. Together they form a unique fingerprint.

Cite this