RelSamp: Preserving Application Structure in Sampled Flow Measurements
The Internet has significantly evolved in the number and variety of applications. Network operators need mechanisms to constantly monitor and study these applications. Given modern applications routinely consist of several flows, potentially to many different destinations, existing measurement approaches such as Sampled NetFlow sample only a few flows per application session. To address this issue, in this paper, the authors introduce RelSamp architecture that implements the notion of related sampling where flows that are part of the same application session are given higher probability.