Low-Rate Overuse Flow Tracer (LOFT): An Efficient and Scalable Algorithm for Detecting Overuse Flows

Abstract

'Daniele E. Asoni' 'Arish Sateesan' 'Jo Vliegen' 'Nele Mentens' 'Hsu‐Chun Hsiao' 'Adrian Perrig'] Abstract—Current probabilistic flow-size monitoring can only detect heavy hitters (e.g., flows utilizing 10 times their permitted bandwidth), but cannot detect smaller overuse (e.g., flows utilizing 50 – 100% more than their permitted bandwidth). Thus, these systems lack accuracy in the challenging environment of highthroughput packet processing, where fast-memory resources are scarce. Nevertheless, many applications rely on accurate flow-size estimation, e.g. for network monitoring, anomaly detection and Quality of Service.