Original scientific paper
https://doi.org/10.24138/jcomss.v9i4.142
On Event Reproduction Ratio in Stateless and Stateful Replay of Real-World Traffic
Ying-Dar Lin
; Department of Computer Science, National Chiao Tung University, Taiwan
Chun-Nan Lu
; Department of Computer Science, National Chiao Tung University, Taiwan
Jose Miguel Sagastume
; Department of Computer Science, National Chiao Tung University, Taiwan
Jui-Tsun Hung
; Department of Computer Science, National Chiao Tung University, Taiwan
Yuan-Cheng Lai
; Department of Information Management, National Taiwan University of Science and Technology, Taiwan
Abstract
Capturing and replaying network flows are important for testing network devices. Replayed traffic should reproduce effects similar to live traffic. This work presents methods to measure the event reproduction ratio, and studies the effectiveness of stateless and stateful traffic replayers based on the events triggered by packets and connections. We use two replayers, SocketReplay and Tcpreplay, and a networking device supporting security services. SocketReplay is a stateful replayer which keeps the state of a connection during replay, while Tcpreplay is a stateless replayer that ignores the connection state. Results indicate that SocketReplay replayed a smaller ratio of the captured traffic and triggered fewer blocking events in subsequent replay tests. Triggering blocking events denotes the replayed traffic cannot fit the onsite context. SocketReplay only replayed 38.74% of the captured TCP traffic, and resulted in an effectiveness of 99.97% (0.00%) in passing (blocking) event ratio. In contrast, Tcpreplay replayed 99.99% of the captured TCP traffic, and resulted in an effectiveness of 99.73% (75.64%) in passing (blocking) event ratio. The choice of a proper replayer and the corresponding replay configuration should depend on the contents of captured traffic and avoid to a significant drop of event reproduction ratio and the effectiveness of replayers.
Keywords
traffic replay; event reproduction ratio; replay effectiveness
Hrčak ID:
180109
URI
Publication date:
22.12.2013.
Visits: 1.199 *