Design and Evaluation of HTTP Protocol Parsers for IPFIX Measurement

• Authors: VELAN Petr; JIRSÍK Tomáš; ČELEDA Pavel
• Year of publication: 2013
• Type: Article in Proceedings
• Conference: Advances in Communication Networking, Lecture Notes in Computer Science, Vol. 8115
• MU Faculty or unit: Institute of Computer Science
• Doi: http://dx.doi.org/10.1007/978-3-642-40552-5_13
• Field: Informatics
• Keywords: HTTP; protocol; parser; traffic; measurement; flow; IPFIX

Attached files

• http-parser-ipfix-data.tar.gz
• http-parser-ipfix-paper.pdf
• http-parser-ipfix-presentation.pdf
• http-parser-ipfix-sources.tar.gz

• Description: In this paper we analyze HTTP protocol parsers that provide a web traffic visibility to IP flow. Despite extensive work, flow meters generally fall short of performance goals due to extracting application layer data. Constructing effective protocol parser for in-depth analysis is a challenging and error-prone affair. We designed and evaluated several HTTP protocol parsers representing current state-of-the-art approaches used in today's flow meters. We show the packet rates achieved by respective parsers, including the throughput decrease (performance implications of application parser) which is of the utmost importance for high-speed deployments.

Related projects

• Cybernetic Proving Ground