An open architecture for distributed IP traffic analysis (DITA

Abstract- This thesis investigated how performance of today's IP traffic metering and analysis applications can be improved by moving from a centralized, high-performance infrastructure, which executes these tasks, to distributed mechanisms, which combine available resources of multi ple devices. The results achieved show that distributed IP traffic metering and analysis leverages bottleneck prob lems. The distributed IP traffic approach DITA does not solve all problems of handling such large amounts of data in very short time by itself, but proposes an orthogonal approach to existing solutions. DITA revelas that combin ing distributed IP traffic metering and analysis reaches better and higher performance sampling and aggregation mechanisms, which do provide a very flexible and the open solution to analyzing IP traffic in future high-speed net works. This has been achieved by the facts that all mecha nisms designed for DITA- and their prototypical implementations- are based on standard protocols and open-source technologies. DITA determines the first approach to distributed IP traffic metering and analysis known today, which (a) addresses the different bottlenecks of traffic analysis in a generic way, and (b) is self-organiz ing, offering a scalable solution to regular traffic increases. 1