Decentralized detection of global threshold crossings using aggregation trees
2008 (English)In: Computer Networks, ISSN 1389-1286, E-ISSN 1872-7069, Vol. 52, no 9, 1745-1761 p.Article in journal (Refereed) Published
The timely detection that a monitored variable has crossed a given threshold is a fundamental requirement for many network management applications. A challenge is the detection of threshold crossing of network-wide variables, which are computed from device counters across the network, using aggregation functions such as SUM, MAX and AVERAGE. This paper contains a detailed description and a comprehensive evaluation of TCA-GAP, a protocol for detecting threshold crossings of network-wide aggregates in a distributed way. Elements of its design include tree-based incremental aggregation for estimating the value of aggregates, a local hysteresis mechanism to reduce overhead and dynamic recomputation of local thresholds to ensure correctness. The protocol is evaluated through extensive simulation using real traces in scenarios with network sizes up to 5232 nodes. From the measurements, we conclude that the protocol is efficient in the sense that the overhead is negligible when the aggregate is far from the threshold. It is scalable as the protocol overhead is independent of the system size for the network sizes and scenario configurations considered. We demonstrate that the local hysteresis parameter can be used to control the tradeoff between protocol overhead and detection delay. We further report on results on how node failures impact overhead and detection quality of the protocol.
Place, publisher, year, edition, pages
Elsevier, 2008. Vol. 52, no 9, 1745-1761 p.
decentralized network management, threshold crossing alerts, real-time, monitoring, tree-based aggregation protocols
IdentifiersURN: urn:nbn:se:kth:diva-17634DOI: 10.1016/j.comnet.2008.02.015ISI: 000257012600006ScopusID: 2-s2.0-43449096331OAI: oai:DiVA.org:kth-17634DiVA: diva2:335678
NOTICE: this is the author’s version of a work that was accepted for publication in . Changes resulting from the publishing process, such as peer review, editing, corrections, structural formatting, and other quality control mechanisms may not be reflected in this document. Changes may have been made to this work since it was submitted for publication. A definitive version was subsequently published in PUBLICATION, VOL 52, ISSUE 9, 2008, DOI 10.1016/j.comnet.2008.02.015
QC 20100525 QC 201202132012-02-132010-08-052012-02-13Bibliographically approved