Declarative Network Monitoring with an Underprovisioned Query Processor (Extended Version)
Frederick Ralph Reiss and Joseph M. Hellerstein
EECS Department, University of California, Berkeley
Technical Report No. UCB/EECS-2006-38
April 10, 2006
http://www2.eecs.berkeley.edu/Pubs/TechRpts/2006/EECS-2006-38.pdf
Many of the data sources used in stream query processing are known to exhibit bursty behavior. We focus here on passive network monitoring, an application in which the data rates typically exhibit a large peak-to-average ratio. Provisioning a stream query processor to handle peak rates in such a setting can be prohibitively expensive. In this paper, we propose to solve this problem by provisioning the query processor for typical data rates instead of much higher peak data rates. To enable this strategy, we present mechanisms and policies for managing the tradeoffs between the latency and accuracy of query results when bursts exceed the steady-state capacity of the query processor. We describe the current status of our implementation and present experimental results on a testbed network monitoring application to demonstrate the utility of our approach.
BibTeX citation:
@techreport{Reiss:EECS-2006-38, Author= {Reiss, Frederick Ralph and Hellerstein, Joseph M.}, Title= {Declarative Network Monitoring with an Underprovisioned Query Processor (Extended Version)}, Year= {2006}, Month= {Apr}, Url= {http://www2.eecs.berkeley.edu/Pubs/TechRpts/2006/EECS-2006-38.html}, Number= {UCB/EECS-2006-38}, Abstract= {Many of the data sources used in stream query processing are known to exhibit bursty behavior. We focus here on passive network monitoring, an application in which the data rates typically exhibit a large peak-to-average ratio. Provisioning a stream query processor to handle peak rates in such a setting can be prohibitively expensive. In this paper, we propose to solve this problem by provisioning the query processor for typical data rates instead of much higher peak data rates. To enable this strategy, we present mechanisms and policies for managing the tradeoffs between the latency and accuracy of query results when bursts exceed the steady-state capacity of the query processor. We describe the current status of our implementation and present experimental results on a testbed network monitoring application to demonstrate the utility of our approach.}, }
EndNote citation:
%0 Report %A Reiss, Frederick Ralph %A Hellerstein, Joseph M. %T Declarative Network Monitoring with an Underprovisioned Query Processor (Extended Version) %I EECS Department, University of California, Berkeley %D 2006 %8 April 10 %@ UCB/EECS-2006-38 %U http://www2.eecs.berkeley.edu/Pubs/TechRpts/2006/EECS-2006-38.html %F Reiss:EECS-2006-38