short-paper

UMON: flexible and fine grained traffic monitoring in open vSwitch

Authors:

T. V. Lakshman,

Songqing ChenAuthors Info & Claims

CoNEXT '15: Proceedings of the 11th ACM Conference on Emerging Networking Experiments and Technologies

Article No.: 15, Pages 1 - 7

https://doi.org/10.1145/2716281.2836100

Published: 01 December 2015 Publication History

Abstract

We study how to provide fine-grained, flexible traffic monitoring in the Open vSwitch (OVS). We argue that the existing OVS monitoring tools are neither flexible nor sufficient for supporting many monitoring applications. We propose UMON, a mechanism that decouples monitoring from forwarding, and offers flexible and fine-grained traffic stats. We describe a prototype implementation of UMON that integrates well with the OVS architecture. Finally, we evaluate the performance using the prototype, and illustrate UMON's efficiency with the example use cases such as detecting port scans.

References

[1]

Cisco IOS NetFlow.

[2]

DEFCON CTF Archive.

[3]

Open vSwitch. http://openvswitch.org/.

[4]

sFlow. http://www.sflow.org/.

[5]

The Frenetic Project. http://www.frenetic-lang.org/.

[6]

P. Bosshart, D. Daly, G. Gibb, M. Izzard, N. McKeown, J. Rexford, C. Schlesinger, D. Talayco, A. Vahdat, G. Varghese, and D. Walker. P4: Programming protocol-independent packet processors. SIGCOMM Comput. Commun. Rev., 44(3), 2014.

Digital Library

[7]

C. Estan and G. Varghese. New directions in traffic measurement and accounting. In SIGCOMM, 2002.

Digital Library

[8]

R. Fontugne, P. Borgnat, P. Abry, and K. Fukuda. Mawilab: combining diverse anomaly detectors for automated anomaly labeling and performance benchmarking. In ACM CoNEXT, 2010.

Digital Library

[9]

N. Foster, R. Harrison, M. J. Freedman, C. Monsanto, J. Rexford, A. Story, and D. Walker. Frenetic: A network programming language. In ICFP, 2011.

Digital Library

[10]

Keith Wiles. Pktgen-DPDK.

[11]

F. Khan, N. Hosein, C.-N. Chuah, and S. Ghiasi. Streaming solutions for fine-grained network traffic measurements and analysis. In ANCS, 2011.

Digital Library

[12]

C. Monsanto, J. Reich, N. Foster, J. Rexford, and D. Walker. Composing software defined networks. In NSDI, 2013.

Digital Library

[13]

M. Moshref, M. Yu, R. Govindan, and A. Vahdat. Dream: Dynamic resource allocation for software-defined measurement. In SIGCOMM, 2014.

Digital Library

[14]

J. Rasley, B. Stephens, C. Dixon, E. Rozner, W. Felter, K. Agarwal, J. Carter, and R. Fonseca. Planck: Millisecond-scale monitoring and control for commodity networks. In SIGCOMM, 2014.

Digital Library

[15]

H. Wang, D. Zhang, and K. G. Shin. Change-point monitoring for the detection of dos attacks. IEEE Trans. Dependable Sec. Comput., 1(4), 2004.

Digital Library

[16]

Y. Zhang. An adaptive flow counting method for anomaly detection in sdn. In CoNEXT, 2013.

Digital Library

Cited By

Zha ZWang AGuo YChen S(2023)Towards Software Defined Measurement in Data Centers: A Comparative Study of Designs, Implementation, and EvaluationIEEE Transactions on Cloud Computing10.1109/TCC.2022.318189011:2(2057-2070)Online publication date: 1-Apr-2023
https://doi.org/10.1109/TCC.2022.3181890
Sha MGuo ZWang KZeng X(2022)A High-Performance and Accurate FPGA-Based Flow Monitor for 100 Gbps NetworksElectronics10.3390/electronics1113197611:13(1976)Online publication date: 24-Jun-2022
https://doi.org/10.3390/electronics11131976
Liu LXu HNiu ZLi JZhang WWang PLi JXue JWang C(2022)ScaleFlux: Efficient Stateful Scaling in NFVIEEE Transactions on Parallel and Distributed Systems10.1109/TPDS.2022.320420933:12(4801-4817)Online publication date: 1-Dec-2022
https://doi.org/10.1109/TPDS.2022.3204209
Show More Cited By

Index Terms

UMON: flexible and fine grained traffic monitoring in open vSwitch
1. Networks
  1. Network properties
    1. Network manageability
  2. Network services
    1. Network monitoring
2. Security and privacy
  1. Intrusion/anomaly detection and malware mitigation

Recommendations

Instrumenting Open vSwitch with Monitoring Capabilities: Designs and Challenges
SOSR '18: Proceedings of the Symposium on SDN Research

Recent advances in Software-Defined Networking (SDN) have enabled flexible and programmable network measurement. A promising trend is to conduct network traffic measurement on widely deployed Open vSwitches (OVS) in data centers. However, little ...
Virtual Network Isolation: Are We There Yet?
SecSoN '18: Proceedings of the 2018 Workshop on Security in Softwarized Networks: Prospects and Challenges

While multi-tenant cloud computing provides great benefits in terms of resource sharing, it introduces a new security landscape and requires strong network isolation guarantees between the tenants. Such network isolation is typically implemented using ...
Effects of Virtualization on Network and Processor Performance Using Open vSwitch and Xen Server
UCC '14: Proceedings of the 2014 IEEE/ACM 7th International Conference on Utility and Cloud Computing

Cloud computing is based on virtualization, where a single physical resource is virtualized into multiple virtual resources. Processor and network virtualization offer many advantages like saving in hardware cost, energy consumption, human effort and ...

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences

CoNEXT '15: Proceedings of the 11th ACM Conference on Emerging Networking Experiments and Technologies

December 2015

483 pages

ISBN:9781450334129

DOI:10.1145/2716281

General Chairs:
Felipe Huici
NEC Europe Ltd
,
Giuseppe Bianchi
University of Rome Tor Vergata

Copyright © 2015 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

Sponsors

SIGCOMM: ACM Special Interest Group on Data Communication

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 01 December 2015

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Short-paper

Conference

CoNEXT '15

Sponsor:

SIGCOMM

CoNEXT '15: Conference on emerging Networking Experiments and Technologies

December 1 - 4, 2015

Heidelberg, Germany

Acceptance Rates

Overall Acceptance Rate 198 of 789 submissions, 25%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

25
Total Citations
View Citations
343
Total Downloads

Downloads (Last 12 months)12
Downloads (Last 6 weeks)2

Reflects downloads up to 02 Mar 2025

Other Metrics

View Author Metrics

Citations

Cited By

Zha ZWang AGuo YChen S(2023)Towards Software Defined Measurement in Data Centers: A Comparative Study of Designs, Implementation, and EvaluationIEEE Transactions on Cloud Computing10.1109/TCC.2022.318189011:2(2057-2070)Online publication date: 1-Apr-2023
https://doi.org/10.1109/TCC.2022.3181890
Sha MGuo ZWang KZeng X(2022)A High-Performance and Accurate FPGA-Based Flow Monitor for 100 Gbps NetworksElectronics10.3390/electronics1113197611:13(1976)Online publication date: 24-Jun-2022
https://doi.org/10.3390/electronics11131976
Liu LXu HNiu ZLi JZhang WWang PLi JXue JWang C(2022)ScaleFlux: Efficient Stateful Scaling in NFVIEEE Transactions on Parallel and Distributed Systems10.1109/TPDS.2022.320420933:12(4801-4817)Online publication date: 1-Dec-2022
https://doi.org/10.1109/TPDS.2022.3204209
Hark RGhanmi MKundel RLieser PSteinmetz R(2021)Monitoring Flows with Per-Application Granularity using Programmable Data Planes2021 IEEE International Symposium on Local and Metropolitan Area Networks (LANMAN)10.1109/LANMAN52105.2021.9478798(1-6)Online publication date: 12-Jul-2021
https://doi.org/10.1109/LANMAN52105.2021.9478798
Elsaadawy MFesselier LKemme B(2021)Demo: Application Monitoring as a Network Service2021 IEEE 41st International Conference on Distributed Computing Systems (ICDCS)10.1109/ICDCS51616.2021.00108(1091-1094)Online publication date: Jul-2021
https://doi.org/10.1109/ICDCS51616.2021.00108
Belkhiri ADagenais M(2021)Diagnostic and troubleshooting of OpenFlow‐enabled switches using kernel and userspace tracesInternational Journal of Communication Systems10.1002/dac.492034:14Online publication date: 17-Jul-2021
https://doi.org/10.1002/dac.4920
Elsaadawy MKemme BYounis M(2020)Enabling Efficient Application Monitoring in Cloud Data Centers using SDNICC 2020 - 2020 IEEE International Conference on Communications (ICC)10.1109/ICC40277.2020.9148826(1-6)Online publication date: Jun-2020
https://doi.org/10.1109/ICC40277.2020.9148826
Elsaadawy MNawab FRiviere E(2019)Monitoring as a service for SDN Based cloud data centersProceedings of the 20th International Middleware Conference Doctoral Symposium10.1145/3366624.3368166(36-40)Online publication date: 9-Dec-2019
https://dl.acm.org/doi/10.1145/3366624.3368166
Su ZWang LHamdi M(2019)CFlam: Cost-effective Flow Latency Monitoring System for Software Defined Networks2019 IEEE 20th International Conference on High Performance Switching and Routing (HPSR)10.1109/HPSR.2019.8808103(1-6)Online publication date: May-2019
https://doi.org/10.1109/HPSR.2019.8808103
Yu YLi XLeng XSong LBu KChen YYang JZhang LCheng KXiao X(2019)Fault Management in Software-Defined Networking: A SurveyIEEE Communications Surveys & Tutorials10.1109/COMST.2018.286892221:1(349-392)Online publication date: Sep-2020
https://doi.org/10.1109/COMST.2018.2868922
Show More Cited By

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Figures

Tables

Media

View Table of Conten