Visualizing packet traces

ABSTRACT

This paper describes an environment for visualizing packet traces that greatly simplifies troubleshooting protocol implementations. Network management centers routinely collect packet traces to tally traffic statistics and to troubleshoot protocol configuration and implementation problems. Previous efforts have focused on the reliable collection of traces and their statistical interpretation. Display of packet traces was restricted to a textual representation of the raw headers. Our prototype environment interprets the trace as a whole. It identifies conversations across protocol layers, simulates the services offered by lower layers, and hides the lower layer implementation detail from the representation of higher layer conversations. Our prototype offers over a dozen different types of diagrams for showing protocol interactions and uses linked highlighting to show the relationships between the objects in different diagrams.

REFERENCES

• 1: D. H. Axner. Tools for Analyzing LAN Performance. Business Communications Review, Aug. 1991.
• 2: S. Bemstein. Intelligent Environments for Network Design and Performance Analysis. In Fourth Annual Artifical Intelligence and AaYanced Computer Technology Conference, May 1988.
• 3: Bolt, Beranek, and Newman Inc. NetScope. Product.
• 4: R. T. Braden, A pseudo-machine for packet monitoring and statistics, Symposium proceedings on Communications architectures and protocols, p.200-209, August 16-18, 1988, Stanford, California, United States
• 5: R. Braden. Requirements For lnternet Hosts - Communication Layers. RFC 1122, Intemet Engineering Task Force, Oct. 1989.
• 6: D. D. Clark. Window and Acknowlegement Strategy in TCP. RFC 813, lntemet Engineering Task Force, July 1982.
• 7: J. D. Day and H. Zimmermann. The OSI Reference Model. Proceedings of the IEEE, 1334-1340, Dec. 1983.
• 8: B. L. Hitson, Knowledge-based monitoring and control: an approach to understanding behavior of TCP/IP network protocols, Symposium proceedings on Communications architectures and protocols, p.210-221, August 16-18, 1988, Stanford, California, United States
• 9: Bruce L. Hitson , Keith A. Lantz, Knowledge-based monitoring and control of distributed systems, 1989
• 10: J. L. Peterson. xscope. Distributed as part of X Windows Release (XIiR5), 1988.
• 11: V. Jacobson, Congestion avoidance and control, Symposium proceedings on Communications architectures and protocols, p.314-329, August 16-18, 1988, Stanford, California, United States
• 12: M. G. Kelley. The Use of Topological Information to Speed Congestion Control Convergence. Master's thesis, MIT, 1990.
• 13: D. Mills. Network Time Protocol (V3). RFC 1305, Intemet Engineering Task Force, Apr. 1992.
• 14: J. Mogul, Efficient use of workstations for passive monitoring of local area networks, Proceedings of the ACM symposium on Communications architectures & protocols, p.253-263, September 26-28, 1990, Philadelphia, Pennsylvania, United States
• 15: J. Reynolds and J. Postel. Assigned Numbers. RFC 1060, Intemet Engineering Task Force, March 1990.
• 16: T. J. Shepard. TCP Packet Trace Analysis. Master's thesis, MIT, 1990.
• 17: S. Waldbusser. Remote Network Monitoring Management Information Base. RFC 1271, Intemet Engineering Task Force, Nov. 1991.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design
          Subjects: Packet-switching networks

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Open Systems Interconnection reference model (OSI)
      C.2.1 Network Architecture and Design
          Subjects: Network topology
      C.2.2 Network Protocols
          Subjects: Protocol verification

General Terms:
Design, Performance