10 245
1 WIDE MAWI WG SNMP WWW WIDE TCP 1. SNMP 2. TCP 247
2 SNMP 2.1 MAWI( NetStat) WIDE NNStat WIDE NOC NNStat SNMP(Simple Network Management Protocol) SNMP SNMP SNMP TCP/IP WWW SNMP SNMP HTML MRTG(Multi Router Trac Grapher) WIDE MRTG 2.2 WIDE NNStat NNStat SunOS BPF(Berkely Packet Filter) NIT(Network Interface Tap) 248
10 249 WIDE Sun SPARC Station SPARC Station NNStat NNStat SPARC Station NOC MAC NOC NNStat BPF NIT 2.3 SNMP NNStat SNMP(Simple Network Management Protocol) 2.3.1 SNMP SNMP SNMP SNMP SNMP TCP/IP MIB(Management Information Base) SNMP SNMP SNMP SNMP WIDE SNMP HTML WWW
250 1996 WIDE 2.3.2 SNMP CMU SNMP 1 perl gr gif SNMP SNMPwalk NSPIXP 10 gr perl gr gif 2.1 1 2.4 Multi Router Trac Grapher(MRTG) 2.4.1 SNMP MRTG 2 (Multi Router Trac Grapher) MRTG MRTG gif HTML MRTG UNIX WindowsNT 2.4.2 MRTG MRTG SNMP Perl 3 C gif gd 4 1 UCDavis(University California at Davis) 1997 5 26 3.2 ftp://ftp.ece.ucdavis.edu/pub/snmp 2 Swiss Federal Institute of Technology Zurich, Department of Electrical Engineering http://www.ee.ethz.ch/ oetiker/webtools/mrtg/ 3 Perl 5 4 http://www.boutell.com/gd/
10 251 2.1: SNMP
252 1996 WIDE 2.4.3 MRTG MRTG 5 crontab cfgmaker community name 2.2 cfgmaker Target[hoge.wide.ad.jp.4]: 4:foo@hoge.wide.ad.jp MaxBytes[hoge.wide.ad.jp.4]: 192000 Title[hoge.wide.ad.jp.4]: hoge (hoge.wide.ad.jp): Serial1 PageTop[hoge.wide.ad.jp.4]: <H1>Traffic Analysis for Serial1 <BR></H1> <TABLE> <TR><TD>System:</TD><TD>hoge in WIDE NOC, JAPAN</TD></TR> <TR><TD>Maintainer:</TD><TD>Osamu Nakamura <osamu@wide.ad.jp></td></tr> <TR><TD>Interface:</TD><TD>Serial1 (4)</TD></TR> <TR><TD>IP:</TD><TD>hoge.wide.ad.jp (AAA.BBB.CCC.DDD)</TD></TR> <TR><TD>Max Speed:</TD> </TABLE> <TD>192.0 kbytes/s (proppointtopointserial)</td></tr> 2.2: cfgmaker MRTG ifinoctets ifoutoctets SMNP MIB 2.4.4 SNMP 1 5 1 30 1 2 1 1
10 253 2.4.5 WIDE MRTG WIDE MRTG 2.3 2.4 MRTG HTML <META HTTP-EQUIV="Refresh" CONTENT=300 > Netscape Navigator WWW 5 2.4.6 MRTG SNMP SNMP command line MRTG SNMP SNMP MRTG MIB (ifindiscards, ifoutdiscards) MRTG ping roundtrip MRTG SNMP SNMP 2.5 SNMP MRTG SNMP NNStat Ether Switch NOC MRTG SNMP
254 1996 WIDE WWW SNMP SNMP
10 255 2.3: WIDE MRTG(1)
256 1996 WIDE 2.4: WIDE MRTG(2)
3 TCP 3.1 WG : : : WIDE NOC WIDE NOC 97 5 27 19 40 97 5 28 19 39 (24 ) 40 3.1 TCP HTTP / Ethernet 2 Ethernet 1 257
258 1996 WIDE 3.1: 3.2 TCP 1:88 2 10 7 ( ) 1 TCP 1:50 2 10 7 ( ) 2 6:67 2 10 5 ( ) 3 3:36 ( ) 4 UDP 3:11 2 10 6 ( ) 5 262:6 ( ) 6 TCP 3.2 3 IP 16:00 21:00 1 18,772,296 2 14,992,922 3 666,516 4 3,608,407,127 ( ) 5 3,105,454 6 275,368,782 ( )
10 259 1800 1600 1400 1200 1000 800 600 400 200 0 0 5 10 15 20 3.2: TCP TCP 666,516 ( ) 100 % HTTP 531,940 79.8 % FTP 5,731 0.9 % TELNET 1,258 0.2 % SMTP, NNTP 38,174 5.7 % 89,413 13.4 %
260 1996 WIDE HTTP (79.8%) (13.4%) FTP (0.9%) SMTP, NNTP (5.7%) TELNET (0.2%) 3.3: FTP 20 ( ) 21 ( ) FTP ( ) TCP 8 HTTP 18,772,296 ( ) TCP 14,992,922 100 % ( 79.9%) HTTP 10,234,327 68.3 % FTP 749,948 5.0 % TELNET 103,628 0.7 % SMTP, NNTP 1,066,152 7.1 % 2,838,867 18.9 %
10 261 HTTP (68.3%) (18.9%) FTP (5.0%) SMTP, NNTP (7.1%) TELNET (0.7%) 3.4: TCP 3,608,407,127 ( ) 100 % HTTP 2,462,237,894 68.2 % FTP 183,608,383 5.1 % TELNET 4,565,357 0.1 % SMTP, NNTP 189,550,019 5.3 % 768,445,474 21.3 % HTTP (68.2%) (21.3%) FTP (5.1%) TELNET (0.1%) SMTP, NNTP (5.3%)
262 1996 WIDE 3.5: 3.6 120 120 100 80 60 40 20 0 0 200 400 600 800 1000 1200 1400 1600 1800 3.6: TCP / 7 8 HTTP HTTP HTTP FTP ( ) 3.6 2000 7 7 (120 )
10 263 HTTP HTTP 3.3 HTTP HTTP HTTP 3.7 700 600 500 400 300 200 100 0 0 500 1000 1500 2000 3.7: HTTP ( 0 ) HTTP ( 16 ) 0 -
264 1996 WIDE Q Q 1 g i = i01 (1 ) (0 <<1, i = 1, 2,...) 100 8 38.4kbps W k (j) P j W k (j) : j k P j : j k 1X W k = P j W k (j) (1) j=0 W k 3.7 U i (j) U i (j) : j i 0 1 i W k (j) = kx i=1 E[U i (j)] (2) U i (j) = x (i 2) x 1 i 1 Q i 9 i 1 ( x 1) Q x i 1 8 1 10 990 9 i
10 265 E[U i+1(j)] = Q f( x 1) x 1g Q =(Q ) E[U i (j)] Q(1 ) (U i (j)=x E[U i (j)]=x ) E [U 2 (j)], E [U 2 (j)] E[U 2 (j)] = Q1E [U 1 (j)] Q(j 1) (3) E [U i (j)] E[U i (j)] = (Q ) i02 E[U 2 (j)] Q(1 ) 1 0 (Q )i02 1 0 (Q ) (4) (3), (4) (2) W k (j) = E [U 1 (j)] Q k 0 1 1 Q fe [U 1(j)] j 0 1 g1 0 k01 0 1 0 = Q, = Q 1 0 (1), (2) W 1 = 1X P j W 1 (j) = j=0 1X j=0 P j 1X E[U i (j)] = i=1 1X j=0 (5), (6) (1) W k P j E[U 1 (j)] (6) (5) W k (j) = W 1 Q k 0 1 1 Q fw 1 n 0 1 g1 0 k01 0 1 0 n = 1X jp j j=0 (P j ) (k 2) P j n (P j ) M /M/1 n M/M/1 n = 2 (1 + ) 2(1 0 ) W 1
266 1996 WIDE W 1 = 1 0 2 Q+nQ 3.8 Q 10 Q( 10 ) =6:8 2 10 05, =0.3 1000 800 600 400 200 0 0 2 4 6 8 10 12 14 3.8: HTTP Best-Eort
10 267 347,022 251.4 = 0.0040 3.9 f(x) =n 1 e 0x n = 347,022, = 0.0016 1400 1200 1000 800 600 400 200 0 0 2 4 6 8 10 12 14 3.9: 2 3.10 g(x) =n (k)k x k01 (k 0 1) e0kx n = 347,022, = 0.0016, k = 2
268 1996 WIDE 1200 1000 800 600 400 200 0 0 2 4 6 8 10 12 14 3.10: 2 HTTP 3.11 0.1 0.05 0-0.05-0.1 0 500 1000 1500 2000
10 269 3.11: 3.11 1 500 00:05 0.05 3.4 0 - HTTP 0-0 - HTTP 0 - RST FIN Graceful-Close RST 77,149 ( ) 100 % FIN 17,558 22.8 % RST 59,591 77.2 % FIN RST 3.12 3.12 FIN RST RST
270 1996 WIDE 500 1 200 FIN RST 150 100 50 0 0 500 1000 1500 2000 3.12: FIN RST HTTP 0 ACK HTTP 0 ACK HTTP 10,234,327 ( ) 100 % 0 ACK 4,757,013 46.5 % 0 - TCP ( ACK) TCP 0 ACK 1. Delayed ACK ACK
10 271 2. 1 ACK 1. ACK ACK 0-2. 1 HTTP 30000 25000 20000 15000 10000 5000 0 0 5 10 15 20 25 30 3.13: 1 3.13 HTTP 1 (ACK SYN FIN RST ) 10 5 TCP / 3 SYN ACK RST HTTP
272 1996 WIDE Web 3.5 TCP HTTP HTTP HTTP 0 - HTTP 2000 0 - SYN ACK RST Web ( ) 0-0 - - Web
4 1996 WIDE SNMP WIDE TCP NSFNET 273
274 1996 WIDE