| 引用本文: | 李春强,董永强,吴国新.流的大小与传输速率相结合的双门限检测算法.[J].国防科技大学学报,2018,40(6):75-81.[点击复制] |
| LI Chunqiang,DONG Yongqiang,WU Guoxin.Dual threshold elephant flow detection algorithm combined flow size with transmission rate[J].Journal of National University of Defense Technology,2018,40(6):75-81[点击复制] |
|
| |
|
|
| 本文已被：浏览 6586次 下载 5381次 |
| 流的大小与传输速率相结合的双门限检测算法 |
| 李春强1, 董永强1,2, 吴国新1,2 |
|
(1.东南大学 计算机科学与工程学院, 江苏 南京 211189;2.东南大学 计算机网络和信息集成教育部重点实验室, 江苏 南京 211189)
|
| 摘要: |
| 提出基于流传输速率与数据量的双门限检测算法。为满足高速网络传输的性能要求，使用Hash表存储流检测的数据结构，将Hash表的冲突处理与基于流速率的缓存替换相结合以实现高效的大流检测,通过限制Hash桶的容量，确保报文的处理性能。真实网络数据的仿真测试结果表明：所提算法在相近的存储开销下，保持了较高的处理性能，准确性优于基于最近最少使用算法的大流检测及其派生算法以及基于统计计数的紧凑型空间节省算法。 |
| 关键词: 流检测 Hash表 传输速率 Hash冲突 缓存替换 |
| DOI：10.11887/j.cn.201806011 |
| 投稿日期：2017-09-28 |
| 基金项目:国家863计划资助项目 (2013AA013503)；国家自然科学基金资助项目 (61272532)；赛尔网络下一代互联网技术创新资助项目(NGII20160407) |
|
| Dual threshold elephant flow detection algorithm combined flow size with transmission rate |
| LI Chunqiang1, DONG Yongqiang1,2, WU Guoxin1,2 |
|
(1.School of Computer Science and Engineering, Southeast University, Nanjing 211189, China;2.Ministry of Education Key Laboratory of Computer Network and Information Integration, Southeast University, Nanjing 211189, China)
|
| Abstract: |
| A novel algorithm which is based on both the flows′ size and transmission rate was proposed for elephant flow detection. In order to meet the performance requirement of high speed networks, the data structure of elephant flow detection was indexed by Hash table, which combines the Hash conflict resolution with the eviction of cached flow entry to identify the elephant flow efficiently. A theoretical analysis was conducted to demonstrate the accuracy, performance and memory overhead of the detection algorithm. Experimental results on real data sets show that the proposed algorithm outperforms least recently used detection algorithm, its derivations and compact space saving detection algorithm in terms of accuracy and performance with similar memory overhead. |
| Keywords: flow detection Hash table transmission rate Hash collision cache eviction |
|
|
|
|
|
