Adaptación y extensión de una herramienta de análisis de tráfico para redes
Javier Domingo, Alberto Pineda, Armando Ferro, Luis Zabala
XXVIII Simposium Nacional URSI
Santiago de Compostela, Spain
September 11-13, 2013
Santiago de Compostela, Spain
September 11-13, 2013
ABSTRACT
In NQaS, a kernel level network traffic sniffer under the name of Ksensor was created long ago. Ksensor has been using for long a kernel version which has become outdated with the pass of the years. In order to recover the relevance of the study of the sniffer and update with the latest trends in kernel efficiency, a project has been developed, in which Ksensor is adapted to get advantage of latest capture optimizations. Linux developers have created several ways to optimize the system throughput in high system load, and in the area of traffic capture, GRO and RPS mechanisms are the most important changes done.
In NQaS, a kernel level network traffic sniffer under the name of Ksensor was created long ago. Ksensor has been using for long a kernel version which has become outdated with the pass of the years. In order to recover the relevance of the study of the sniffer and update with the latest trends in kernel efficiency, a project has been developed, in which Ksensor is adapted to get advantage of latest capture optimizations. Linux developers have created several ways to optimize the system throughput in high system load, and in the area of traffic capture, GRO and RPS mechanisms are the most important changes done.
Integración de PF_RING en el sensor de análisis de tráfico Adviser
Daniel Fernández, Armando Ferro, Luis Zabala, Alberto Pineda
XXVII Simposium Nacional URSI
Elche, Spain.
September 12-14, 2012
Elche, Spain.
September 12-14, 2012
ABSTRACT
Adviser is a user-space software which allows to capture and analyze traffic in high speed networks. This paper describes the integration of PF_RING library, kernel module and optional drivers into Adviser platform, to enhance the packet capturing. Adviser packet capturing is made through standard Linux Libpcap library and offers good performance and flexibility. PF_RING increases the packet capturing adding a new kernel module which speeds up the packet copying from kernel space to user-space. Therefore this integration will improve Adviser's traffic monitoring performance, reducing the CPU consumption in packet capturing
Adviser is a user-space software which allows to capture and analyze traffic in high speed networks. This paper describes the integration of PF_RING library, kernel module and optional drivers into Adviser platform, to enhance the packet capturing. Adviser packet capturing is made through standard Linux Libpcap library and offers good performance and flexibility. PF_RING increases the packet capturing adding a new kernel module which speeds up the packet copying from kernel space to user-space. Therefore this integration will improve Adviser's traffic monitoring performance, reducing the CPU consumption in packet capturing
Arquitectura de generación e inyección de tráfico sintético configurable en FPGA
Iker Blanco, Adrián Morán, Armando Ferro, Luis Zabala, Alberto Pineda
XXVII Simposium Nacional URSI
Elche, Spain.
September 12-14, 2012
Elche, Spain.
September 12-14, 2012
ABSTRACT
The aim of this paper is to describe the design of a FPGA-based traffic generator able to inject synthetic traffic at gigabit or higher rate. The proposed architecture has been designed to add new features that existing generators do not offer. The generator tries to emulate real network traffic by injecting multiple flows that follow user desired statistical distributions. It offers a generic architecture that can support various protocols. The system also keeps an accurate timing of the injection of each frame. With those features, the proposed system aims to serve as a tool for testing traffic capture systems and other network resources at stress conditions, so research teams can measure and improve the performance of those systems.
The aim of this paper is to describe the design of a FPGA-based traffic generator able to inject synthetic traffic at gigabit or higher rate. The proposed architecture has been designed to add new features that existing generators do not offer. The generator tries to emulate real network traffic by injecting multiple flows that follow user desired statistical distributions. It offers a generic architecture that can support various protocols. The system also keeps an accurate timing of the injection of each frame. With those features, the proposed system aims to serve as a tool for testing traffic capture systems and other network resources at stress conditions, so research teams can measure and improve the performance of those systems.
Diseño para la captura y análisis de flujos con prioridad en un sensor de tráfico a nivel de kernel
Lander Alonso, Armando Ferro, Luis Zabala, Alberto Pineda
XXVI Simposium Nacional URSI
Leganés, Spain
September 7-9, 2011
Leganés, Spain
September 7-9, 2011
ABSTRACT
This paper describes the research for a priority flow oriented design of the Ksensor architecture. Ksensor is a multiprocessor traffic capture and analysis system for high speed networks developed at kernel space. While the actual architecture permits the capture and analysis of data flows, there are several scenarios where it does not perform adequately to achieve this goal. For example, if a certain type of traffic is more valuable than others. Thus, this project pursues the design that allows Ksensor to provide data flow treatment to a larger extent. Allowing the new architecture to provide more reliability in data flow capture and processing.
This paper describes the research for a priority flow oriented design of the Ksensor architecture. Ksensor is a multiprocessor traffic capture and analysis system for high speed networks developed at kernel space. While the actual architecture permits the capture and analysis of data flows, there are several scenarios where it does not perform adequately to achieve this goal. For example, if a certain type of traffic is more valuable than others. Thus, this project pursues the design that allows Ksensor to provide data flow treatment to a larger extent. Allowing the new architecture to provide more reliability in data flow capture and processing.
Estudio de los Mecanismos de Espera de GNU/Linux para el Diseño de un Inyector Software de Tráfico Sintético
Alberto Pineda, Luis Zabala, Armando Ferro, Alejandro Muñoz
XXV Simposium Nacional URSI
Bilbao, Spain
September 15-17, 2010
Bilbao, Spain
September 15-17, 2010
ABSTRACT
In the design of traffic generators time measurement is very important. When a high rate is needed time lapses between packet sending are smaller. Because of this, the granularity of the system must be good. GNU/Linux has some tools that could be very useful to implement the measure of those time lapses. In order to choose the best solution, this paper studies the different tools that are provided by GNU/Linux. This study is aimed at the design of a kernel module that works as a traffic generator. In this paper is presented a solution that uses two kinds of tools, too. In this way, the performance of the generator is better.
In the design of traffic generators time measurement is very important. When a high rate is needed time lapses between packet sending are smaller. Because of this, the granularity of the system must be good. GNU/Linux has some tools that could be very useful to implement the measure of those time lapses. In order to choose the best solution, this paper studies the different tools that are provided by GNU/Linux. This study is aimed at the design of a kernel module that works as a traffic generator. In this paper is presented a solution that uses two kinds of tools, too. In this way, the performance of the generator is better.
Caracterización Temporal de GNU/Linux para el Diseño de un Inyector Software de Tráfico Sintético
Alberto Pineda, Armando Ferro, Alejandro Muñoz, Luis Zabala
XXV Simposium Nacional URSI
Bilbao, Spain
September 15-17, 2010
Bilbao, Spain
September 15-17, 2010
ABSTRACT
The rate of networks is bigger all the time. Because of this increase, computational ability of network resources and principal servers could not be adequate. In order to improve the performance of this equipment traffic generators are needed. These have to generate modelled traffic flows at high rates. To do this, the system must measure short lapses of time. This paper studies how the traffic generator over GNU/Linux sends a packet. It presents some temporary parameters to define the packet sending. Some experiments have been done in order to measure those parameters. Thanks to those measurements, this paper studies how this sending is, in fact. This helps taking decisions in the final design of the traffic generator.
The rate of networks is bigger all the time. Because of this increase, computational ability of network resources and principal servers could not be adequate. In order to improve the performance of this equipment traffic generators are needed. These have to generate modelled traffic flows at high rates. To do this, the system must measure short lapses of time. This paper studies how the traffic generator over GNU/Linux sends a packet. It presents some temporary parameters to define the packet sending. Some experiments have been done in order to measure those parameters. Thanks to those measurements, this paper studies how this sending is, in fact. This helps taking decisions in the final design of the traffic generator.
Arquitectura para Inyección de Tráfico y Monitorización en Redes de Alta Capacidad
Alberto Pineda, Armando Ferro, Alejandro Muñoz
XXIV Simposium Nacional URSI
Santander, Spain
September 16-18, 2009
Santander, Spain
September 16-18, 2009
ABSTRACT
With the increase of the rate in networks, computational ability of network resources and principal servers could be inadequate. In order to prove the performance of networks, network resources and servers there have to be traffic generators. These generate traffic flows with different characteristics. It is also necessary to have network monitoring systems to inspect and process traffic. Doing this in high speed segments in an efficient way is not easy. This paper proposes a design of an architecture to inject traffic in a synthetic way and to improve the performance in network traffic analysis. This architecture tries to improve other solutions’ performance using a general purpose architecture under Linux over a PC with a common network interface. The basis of this improvement is including the application in the kernel of the operating system.
With the increase of the rate in networks, computational ability of network resources and principal servers could be inadequate. In order to prove the performance of networks, network resources and servers there have to be traffic generators. These generate traffic flows with different characteristics. It is also necessary to have network monitoring systems to inspect and process traffic. Doing this in high speed segments in an efficient way is not easy. This paper proposes a design of an architecture to inject traffic in a synthetic way and to improve the performance in network traffic analysis. This architecture tries to improve other solutions’ performance using a general purpose architecture under Linux over a PC with a common network interface. The basis of this improvement is including the application in the kernel of the operating system.
Estrategia de Integración de la Plataforma velocimetro.org en la Infraestructura Global de Medidas de Calidad de Servicio QoSMETER
Eduardo Saiz, Iñaki Etxebarria, Luis Burgos
XXIV Simposium Nacional URSI
Santander, Spain
September 16-18, 2009
Santander, Spain
September 16-18, 2009
ABSTRACT
The need of a neutral Quality of Service (QoS) measurement system is usually demanded by Internet Service Providers (ISP) as well as their customers in order to evaluate their networks, and, therefore, establish comparisons with other providers. The service velocimetro.org and the measurement infrastructure QoSMETER, both developed by Networking Quality and Security Research Group (NQaS) at the University of the Basque Country, are a reliable solution to this demand. The aim of this paper is to show that, in due to the prolific growth of the Internet technologies over the last years, the merging of both projects is required. Several modifications are needed for that purpose and a procedure plan is required to minimize the effect of the plausible integration malfunctions in the services that are already deployed and accessible to users.
The need of a neutral Quality of Service (QoS) measurement system is usually demanded by Internet Service Providers (ISP) as well as their customers in order to evaluate their networks, and, therefore, establish comparisons with other providers. The service velocimetro.org and the measurement infrastructure QoSMETER, both developed by Networking Quality and Security Research Group (NQaS) at the University of the Basque Country, are a reliable solution to this demand. The aim of this paper is to show that, in due to the prolific growth of the Internet technologies over the last years, the merging of both projects is required. Several modifications are needed for that purpose and a procedure plan is required to minimize the effect of the plausible integration malfunctions in the services that are already deployed and accessible to users.
Diseño e implementación de un sistema de gestión y mantenimiento para el servicio velocimetro.org
Iñaki Etxebarria, Luis Burgos, Ianire Taboada, Eduardo Saiz
XXIII Simposium Nacional URSI
Madrid, Spain
September 22-24, 2008
Madrid, Spain
September 22-24, 2008
ABSTRACT
This article tries to specify the basis of a project about a new system to control and manage an Internet quality test that measures the access speed of Internet users. We will explain the current situation of the service to look for the necessities, and then try to propose tools to solve those necessities. These tools must be integrated in a common interface to give the administrator of the service an easy-to-use environment as long as a powerful system to manage the quality test tool. To conclude, we will propose the necessary technologies to implement the different parts of the system.
This article tries to specify the basis of a project about a new system to control and manage an Internet quality test that measures the access speed of Internet users. We will explain the current situation of the service to look for the necessities, and then try to propose tools to solve those necessities. These tools must be integrated in a common interface to give the administrator of the service an easy-to-use environment as long as a powerful system to manage the quality test tool. To conclude, we will propose the necessary technologies to implement the different parts of the system.
Sistema de gestión de servicios heterogéneos distribuidos
Jon Zubizarreta Pomposo, Fidel Liberal Malaina, José Luis Jodra Luque
XXI Simposium Nacional URSI
Oviedo, Spain
September 12-15, 2006
Oviedo, Spain
September 12-15, 2006
ABSTRACT
This paper presents the design of a centralized system responsible for the management of remote procedures execution in a distributed scenario. The architecture proposed will be able to unify the information provided by several services with different types of managing interfaces. In these terms, the application will catch, organize and execute procedure queries from clients in order to achieve the information by means of a common interface that will be supported by a structure of plug-ins. On the other hand, one of the objectives of the design is to describe a model for the generic definition of tasks, so that the developed system could arrange them regardless of the type of service to which they belong.
This paper presents the design of a centralized system responsible for the management of remote procedures execution in a distributed scenario. The architecture proposed will be able to unify the information provided by several services with different types of managing interfaces. In these terms, the application will catch, organize and execute procedure queries from clients in order to achieve the information by means of a common interface that will be supported by a structure of plug-ins. On the other hand, one of the objectives of the design is to describe a model for the generic definition of tasks, so that the developed system could arrange them regardless of the type of service to which they belong.
Sistema de medida de la calidad para voz sobre IP
Jaime Fernández Hernández, Jose Luis Jodra Luque, Rodrigo Partearroyo González
XXI Simposium Nacional URSI
Oviedo, Spain
September 12-15, 2006
Oviedo, Spain
September 12-15, 2006
ABSTRACT
Data network services have been developed since their begining and nowadays they are showing a great expansion. This is the case of the streaming services such as voice transmision over IP (VoIP). The technology is in an advanced state, however, the Quality of Service (QoS) measurement and evaluation are still being studied. This paper analyzes the relationship between the user's perceived quality and the impairment factors of the network, as well as, the methodology followed to measure the required parameters. The results are expected to be interesting not only for the users but also for the Internet providers, so that it gives them the oportunity to improve the service offered in an optimal way.
Data network services have been developed since their begining and nowadays they are showing a great expansion. This is the case of the streaming services such as voice transmision over IP (VoIP). The technology is in an advanced state, however, the Quality of Service (QoS) measurement and evaluation are still being studied. This paper analyzes the relationship between the user's perceived quality and the impairment factors of the network, as well as, the methodology followed to measure the required parameters. The results are expected to be interesting not only for the users but also for the Internet providers, so that it gives them the oportunity to improve the service offered in an optimal way.
Migración al kernel de un sensor de análisis de tráfico en redes de alta velocidad
Aritz Bastida, Igor Delgado, Alfredo Beaumont
XX Symposium Nacional de la URSI
Gandia, Spain
September 14-16, 2005
Gandia, Spain
September 14-16, 2005
ABSTRACT
Traffic analyzers play a very important role in Network Engineering. They are used in firewalling, QoS, Intrusion Detection Systems (IDS), network monitoring,and so on. As networks become faster, more traffic needs to be processed and so, traffic analyzers should have more processing power as well. However, the hardware solutions that have been suggested for now are quite expensive so they are not always convenient. As for software solutions, they are generally not too efficient, as they normally run in the user area of the operating system. In this paper, we describe a network traffic analyzer that has been moved to the Linux kernel, so that its performance can be improved and the package loss ratio minimized.
Traffic analyzers play a very important role in Network Engineering. They are used in firewalling, QoS, Intrusion Detection Systems (IDS), network monitoring,and so on. As networks become faster, more traffic needs to be processed and so, traffic analyzers should have more processing power as well. However, the hardware solutions that have been suggested for now are quite expensive so they are not always convenient. As for software solutions, they are generally not too efficient, as they normally run in the user area of the operating system. In this paper, we describe a network traffic analyzer that has been moved to the Linux kernel, so that its performance can be improved and the package loss ratio minimized.
Observatorio de medidas de la QoS en Internet
Rodrigo Partearroyo, José Ramón Juárez
XIX Simposium Nacional URSI
Barcelona, Spain
September, 2004
Barcelona, Spain
September, 2004
ABSTRACT
Nowadays, two possible ways are possible to evaluate quality of service in data networks. On one hand, QoS has been traditionally quantified objectively across a group of technical measurable parameters. Nevertheless, the evaluation of QoS in data networks based on the perception that have the users of them, on the basis of parameters adapted at its level of knowledge, is gaining greater importance. Therefore, following this tendency, the “Observatorio de Medidas” raises an innovating architecture, that is able to fill the existing gap between the models of analyses of QoS based on strictly theoretical parameters and the ability to obtain useful data on the basis of a series of collected real data from measures made by means of different QoS evaluation tools in data networks.
Nowadays, two possible ways are possible to evaluate quality of service in data networks. On one hand, QoS has been traditionally quantified objectively across a group of technical measurable parameters. Nevertheless, the evaluation of QoS in data networks based on the perception that have the users of them, on the basis of parameters adapted at its level of knowledge, is gaining greater importance. Therefore, following this tendency, the “Observatorio de Medidas” raises an innovating architecture, that is able to fill the existing gap between the models of analyses of QoS based on strictly theoretical parameters and the ability to obtain useful data on the basis of a series of collected real data from measures made by means of different QoS evaluation tools in data networks.
Herramienta de Captura y Análisis Concurrente de Tráfico en Redes de Alta Velocidad
Igor Delgado, Alfredo Beaumont, Jose Oscar Fajardo
XIX Simposium Nacional URSI
Barcelona, Spain
September, 2004
Barcelona, Spain
September, 2004
ABSTRACT
As networks become faster, traffic analizers and network intrusion detections systems have big problems handling all the traffic of a network. As a result of the investigation on this topic, looking for parallelism in the processing of the captured traffic, this document presents a tool designed for high-speed network traffic analysis. The tool is based on the concurrent analysis of multiple instances, using shared memory as an interface among instances and between modules of the system. The system includes a powerful rule language with adds big flexibility to the system, and so the tool may work in different areas involving traffic analysis, including both for Intrusion Detection System (IDS) and Quality of Service (QoS) analysis.
As networks become faster, traffic analizers and network intrusion detections systems have big problems handling all the traffic of a network. As a result of the investigation on this topic, looking for parallelism in the processing of the captured traffic, this document presents a tool designed for high-speed network traffic analysis. The tool is based on the concurrent analysis of multiple instances, using shared memory as an interface among instances and between modules of the system. The system includes a powerful rule language with adds big flexibility to the system, and so the tool may work in different areas involving traffic analysis, including both for Intrusion Detection System (IDS) and Quality of Service (QoS) analysis.
Plataforma para el Diseño y Desarrollo de Aplicaciones Web Corporativas
Oscar Casquero, Javier Leandro, Jose Oscar Fajardo
XIX Simposium Nacional URSI
Barcelona, Spain
September, 2004
Barcelona, Spain
September, 2004
ABSTRACT
The development of enterprise web applications is a very complex and multi-part issue where different programming technologies and tools have to be used. Although these specialized technologies and tools are intended to work together, it would be desirable to have a very flexible designing and developing framework where all the information was managed and stored following a predefined Service Driven Architecture which should also provide internationalization (i18n) to web pages for content and presentation. XML technologies and Java based web applications (implemented as a component-based multi-tier application design defined by J2EE) have been selected to put into practice that kind of framework. This paper describes the nature of enterprise web applications, proposes a service-based approach to develop these systems and presents an example where this solution is used to fulfill the internal management needs of a university department.
The development of enterprise web applications is a very complex and multi-part issue where different programming technologies and tools have to be used. Although these specialized technologies and tools are intended to work together, it would be desirable to have a very flexible designing and developing framework where all the information was managed and stored following a predefined Service Driven Architecture which should also provide internationalization (i18n) to web pages for content and presentation. XML technologies and Java based web applications (implemented as a component-based multi-tier application design defined by J2EE) have been selected to put into practice that kind of framework. This paper describes the nature of enterprise web applications, proposes a service-based approach to develop these systems and presents an example where this solution is used to fulfill the internal management needs of a university department.
Gestión de reglas para el análisis de tráfico basado en un lenguaje estructurado
Armando Ferro, Fidel Liberal, Igor Delgado
XVIII Simposium Nacional URSI
A Coruña, Spain
September 10-12, 2003
A Coruña, Spain
September 10-12, 2003
ABSTRACT
The communication is very important in our society. As the need of controling the information interchange increases, data capture system has been implemented. Analysing data can provide essential information like intrusion detection, quality of service statistics, accounting… These scopes are differents so a unified language facilitates to compose rules and to interchange them with other systems. XML (Extensible Markup Language) tags are defined to create a large number of differents and complex rules. Then it was developed a parser which load in memory these rules.
The communication is very important in our society. As the need of controling the information interchange increases, data capture system has been implemented. Analysing data can provide essential information like intrusion detection, quality of service statistics, accounting… These scopes are differents so a unified language facilitates to compose rules and to interchange them with other systems. XML (Extensible Markup Language) tags are defined to create a large number of differents and complex rules. Then it was developed a parser which load in memory these rules.
Herramienta de gestión automatizada para la elaboración de proyectos en entornos de formación
Armando Ferro, David Sappia, Fidel Liberal
XVIII Simposium Nacional URSI
A Coruña, Spain
September 10-12, 2003
A Coruña, Spain
September 10-12, 2003
ABSTRACT
During the last years the use of computers and Telematic networks has permited to surpass the barriers of space and time to facilitate interactive and personalised contact among the members of University community. The concept of a Virtual Campus has been introduced, offering several advantages over the traditional education: for instance, an easier communication between teachers and students and a solution for time and space problems. In this context the development of the system described in this document is aimed at helping users to smartly schedule projects, activities and tasks for an optimum use of work and effort, in an educational enviroment and in a simple and flexible way.
During the last years the use of computers and Telematic networks has permited to surpass the barriers of space and time to facilitate interactive and personalised contact among the members of University community. The concept of a Virtual Campus has been introduced, offering several advantages over the traditional education: for instance, an easier communication between teachers and students and a solution for time and space problems. In this context the development of the system described in this document is aimed at helping users to smartly schedule projects, activities and tasks for an optimum use of work and effort, in an educational enviroment and in a simple and flexible way.
Servicio de medida de QoS en internet - VELOCIMETRO.ORG
José María Perera, Eva Ibarrola, Armando Ferro, Alejandro Muñoz, Cristina Perfecto
XVIII Simposium Nacional URSI
A Coruña, Spain
September 10-12, 2003
A Coruña, Spain
September 10-12, 2003
ABSTRACT
This paper presents velocimetro.org, the service developed by the Engineering Faculty of Bilbao to provide access speed measurements in Internet. The explosion of Internet Service Providers (ISP) and different types of technologies in Internet access, makes it difficult for Internet users to decide about the best or more acquaint access to cope with their needs. Velocimetro.org offers the possibility to obtain a neutral measurement of the quality of service (QoS) of the access to Internet. In this way, users can evaluate and decide if their ISP is covering their demands or, on the contrary, is not complying with the terms of the contract. From this point of view of an ISP, velocimetro.org allows to make comparisons of their service against their competitors.
This paper presents velocimetro.org, the service developed by the Engineering Faculty of Bilbao to provide access speed measurements in Internet. The explosion of Internet Service Providers (ISP) and different types of technologies in Internet access, makes it difficult for Internet users to decide about the best or more acquaint access to cope with their needs. Velocimetro.org offers the possibility to obtain a neutral measurement of the quality of service (QoS) of the access to Internet. In this way, users can evaluate and decide if their ISP is covering their demands or, on the contrary, is not complying with the terms of the contract. From this point of view of an ISP, velocimetro.org allows to make comparisons of their service against their competitors.


