Who Said That? - The Send-Receive Correlation Problem in Network Log Analysis

Date Added: May 2009
Format: PDF

In computer network experiments, each participating node typically records a local log le using tools like tcpdump. Such les contain the transmitted and received packets along with time stamps. When the outcome of an experiment is analyzed, an interesting problem may arise: given a log entry for a reception, what is the corresponding transmission? If each transmission is unique, in the sense that during the whole recorded time span only one binary identical packet transmission has taken place, this question is trivial. However, with many protocols, binary identical packet transmissions may occur.