Implementation and Evaluation of a Protocol for Detecting Network-Wide Threshold Crossing Alerts
2006 (English)In: E2EMON 06: 4th IEEE/IFIP Workshop on End-to-End Monitoring Techniques and Services - REAL-TIME MONITORING OF INTERNET PATHS / [ed] AlShaer E, Pras A, Brownlee N, New York: IEEE , 2006, Vol. 4, 42-49 p.Conference paper (Refereed)
Threshold crossing alerts (TCAs) indicate to a management system that a management variable, associated with the state, performance or health of the network, has crossed a certain threshold. In this paper, we report on implementing and evaluating TCA-GAP, a distributed protocol for detecting network-wide TCAs, which reports threshold crossings on aggregates, such as SUM, AVERAGE, or MAX of device counters. We present a concept for assessing the quality of detecting network-wide TCAs, which we apply to evaluate TCA-GAP on a lab testbed. First, we evaluate the correctness of the protocol by determining the correctly detected threshold crossings, the false positives and the false negatives. Second, for the correctly detected threshold crossings, we measure the delays between the time a crossing was reported by the protocol and the time of its actual occurrence. Finally, we demonstrate that the fundamental tradeoff between the quality of TCA detection and the management overhead can be controlled in TCA-GAP by modifying the maximum message rate on the management overlay.
Place, publisher, year, edition, pages
New York: IEEE , 2006. Vol. 4, 42-49 p.
threshold defection, decentralized management, distributed aggregation
IdentifiersURN: urn:nbn:se:kth:diva-26204DOI: 10.1109/E2EMON.2006.1651278ISI: 000238288300006ScopusID: 2-s2.0-33947642088ISBN: 1-4244-0145-3OAI: oai:DiVA.org:kth-26204DiVA: diva2:371516
4th IEEE/IFIP Workshop on End-to-End Monitoring Techniques and Services Vancouver, CANADA, APR 03, 2006
QC 201011222010-11-212010-11-212010-11-22Bibliographically approved