Design and Evaluation of HTTP Protocol Parsers for IPFIX Measurement

EUNICE 2013

Authors

Petr Velan, Tomáš Jirsík, Pavel Čeleda

Abstract

In this paper we analyze HTTP protocol parsers that provide a web traffic visibility to IP flow. Despite extensive work, flow meters generally fall short of performance goals due to extracting application layer data. Constructing effective protocol parser for in-depth analysis is a challenging and error-prone affair. We designed and evaluated several HTTP protocol parsers representing current state-of-the-art approaches used in today's flow meters. We show the packet rates achieved by respective parsers, including the throughput decrease (performance implications of application parser) which is of the utmost importance for high-speed deployments. We believe that these results provide researchers and network operators with important insight into application visibility and IP flow.

Downloads

• Data sets used for benchmarking
• HTTP parsers sources

Back

---

© 2013 Masaryk University - Institute of Computer Science - visit http://www.muni.cz/ics/