Authors: Loai Kayed B. Melhim; Mahdi Jemmali; Basil AsSadhan; Hani Alquhayz
Addresses: Department of Health Information Management and Technology, College of Applied Medical Sciences, University of Hafar Al Batin, Hafr Baten, 39524, Saudi Arabia ' Department of Computer Science and Information, College of Science at Zulfi, Majmaah University, Majmaah, 11952, Saudi Arabia; Department of Computer Science, Higher Institute of Computer Science and Mathematics, Monastir University, Monastir, 5000, Tunisia ' Department of Electrical Engineering, College of Engineering, King Saud University, Riyadh, 11421, Saudi Arabia ' Department of Computer Science and Information, College of Science at Zulfi, Majmaah University, Majmaah, 11952, Saudi Arabia
Abstract: Efficient and reliable network operation are the major concerns of computer networks monitoring, an objective that can be achieved by properly analysing the monitored network traffic. But due to the huge size of monitored traffic, this paper suggests a solution by presenting a representative of the monitored traffic. We claim that analysing the representative will generate the same information about the monitored networks, rather than analysing the whole network traffic. The representative is created by decomposing the monitored traffic into two parts, a representative and the rest of the traffic (data traffic), visual plots and cross-correlation will be used to expose the similarity between the representative and the data traffic. Experiments showed that the presented methodology reduces the volume of the analyzed traffic by a percentage of (30-80%), representative and data traffic showed similar behavior in the visual plots and in the cross-correlation calculations.
Keywords: network monitoring; network performance; network traffic; network packets; network traffic reduction; TCP header flags.
International Journal of Sensor Networks, 2020 Vol.33 No.4, pp.239 - 249
Received: 02 Dec 2019
Accepted: 12 Jan 2020
Published online: 15 Aug 2020 *