The MOME Repository€¦ · The MOME Project • MOME - Mo ntioring & Me asurement Cluster –...

The MOME RepositoryAn opportunity for COST-TMA?

Tanja Zseby, Carsten Schmoll, Fraunhofer FOKUS(some slides from Felix Strohmeier, Salzburg Research)

COST TMASeptember 22, 2008

The MOME Project

• MOME - Montioring & Measurement Cluster

– Co-ordination Action, IST FP6,

– 2 years, 8 partners

• Goals: Coordinate EU work on measurements

– Evaluation of measurement tools

– Provisioning of measurement data

– Support for standardization

– Building a knowledge exchange platform

September 22, 2008 COST TMA 2 of 19

3

The MOME Project

Co-ordinate activitiesin the field of IP monitoring and measurement

Measurement Tools| evaluate &

promote interoperability

| provide information

Measurement Data| select format| provide database| collect| convert| disseminate

Measurement Standardisation

| identify potential| collect plans| co-ordinate joint

contributions

Build a knowledge exchange platform| Workshops, conferences| Dissemination activities| Website

MOME Repository

Goal: Help researchers to find tools and data • Tool Database

– Getting overview on measurement tools (>300)– Selection and evaluation of most used tools (>50)– Questionnaire from 11 projects working with measurement tools– Comparison and interoperability lookup – Categorisation, Measured metrics– Hardware and software platform

• Trace Database– Documentation of measurement environment and scenario – Statistical information about the captured traffic– Link to the repository, where data is actually stored– Automatic Analyses

September 22, 2008 COST TMA 4 of 19

Common GUI and Browse Functions

5

Common GUI, Detail View

6

Tools DB: Categories

• Sniffing• Performance Monitoring• Connectivity Checking• Route Detection• Topology Detection• Traffic Visualization• Traffic Generation• Bandwidth Measurement

September 22, 2008 COST TMA 7 of 19

Packet traces Flow traces

QoS results

Routing data

HTTP traces

Web-based repositories

Monitoring and

Measurement data

• Packet Capturing• Traffic Flow

Measurement• Packet Monitoring• Connection Monitoring• Application Level

Monitoring• Service Monitoring• Accounting• Intrusion Detection

Tools DB: Meta Information

• Stored Meta-Information– Availability– Maturity– Version Info– License Information– Measured Metrics– Supported Protocols– Supported Platforms– Measurement Methods– Measurement Algorithms– Interfaces

• Control• Data

– Interoperability with other Tools

• Further Information– Tool Maintainer– User Comments

• Links– Homepage– Contact– Related URLs

Trace DB: Categories

• Intrusion detection evaluation sets• Traffic traces of different applications• Traffic matrices• BGP traces• IPv6 measurement traces• Wireless traffic traces• …

September 22, 2008 COST TMA 9 of 19

MOME Database Model

Packet traces

Raw data

MOME Database Model

QoS measurements

Raw data

MOME Database Model

Routing data

Raw data

Automatic AnalysesExtract additional information from the raw data

Helpful for users who want to find interesting measurement data

Results stored in the MOME database as additional meta-data

Currently supported packet trace formats

• Libpcap (tcpdump) • DAG (ERF)

Analysis Request Manager (ARM)

Download Manager (DM)

Autonomous Process Manager (PM)

Analysis Manager (AM)

user requests the analysis

PM starts the DM

PM starts the AM

parse results and fill DB

2

Measurement data repository

3

download raw data

47

Data analysis tool

5 6execute

tool results

MOME DB

1

GUI Data Analysis Workstation

Automatic Analyses

• Open for incorporating new analysis tools• Available analysis results

– General statistics– Bit rate plots

Analysis Manager

analysis_typelocal_file_name

Check available tools

Execute analysis tool

local_file_name results_file_name

Parse results Plot graphs

MOME DB

External analysis tool

start finish

Update database

Automatic Analyses - Example

Current DataStatistics page shows current amount of information

Current Data – Measurement Tools

| 123 Tools total| 29 'Performance Measurement'| 13 'Traffic Flow Measurement'| 13 'Packet Capturing'| 10 'Packet Monitoring'| 22 'Connection Monitoring'| 16 'Traffic Visualization'| 13 'Route/Topology Detection'| 8 'Traffic Generation'| 3 'Application-level Monitoring'| 6 'Accounting'| 6 'Bandwidth Measurement'| 6 'Service Monitoring'| 5 'Intrusion Detection'| 5 'Sniffing‘

| many tools belong to more than one category

0 5 10 15 20 25 30 35

1

2

3

4

5

6

7

8

9

10

11

12

13

14

Current Data – Measurement Traces

Swinbourne SONG traces

Univ. Auckland packet traces

Useful for COST TMA?

• MOME provides– Tool meta database– Trace meta database– Platform for measurement research

• Status– MOME Project finished– Basic maintenance still done by Salzburg

Research, FOKUS Warsaw University of Technology

• Continue this work in COST TMA?September 22, 2008 COST TMA 19 of 19

Thank you!tanja.zseby@fokus.fraunhofer.de

MOME Repository: http://www.ist-mome.org/

MOME Database Model

Flow traces

Raw data

MOME Database Model

HTTP trace

Raw data