Electrical Engineering
      and Computer Sciences

Electrical Engineering and Computer Sciences

COLLEGE OF ENGINEERING

UC Berkeley

Declarative Network Monitoring with an Underprovisioned Query Processor (Extended Version)

Frederick Ralph Reiss and Joseph M. Hellerstein

EECS Department
University of California, Berkeley
Technical Report No. UCB/EECS-2006-38
April 10, 2006

http://www.eecs.berkeley.edu/Pubs/TechRpts/2006/EECS-2006-38.pdf

Many of the data sources used in stream query processing are known to exhibit bursty behavior. We focus here on passive network monitoring, an application in which the data rates typically exhibit a large peak-to-average ratio. Provisioning a stream query processor to handle peak rates in such a setting can be prohibitively expensive. In this paper, we propose to solve this problem by provisioning the query processor for typical data rates instead of much higher peak data rates. To enable this strategy, we present mechanisms and policies for managing the tradeoffs between the latency and accuracy of query results when bursts exceed the steady-state capacity of the query processor. We describe the current status of our implementation and present experimental results on a testbed network monitoring application to demonstrate the utility of our approach.


BibTeX citation:

@techreport{Reiss:EECS-2006-38,
    Author = {Reiss, Frederick Ralph and Hellerstein, Joseph M.},
    Title = {Declarative Network Monitoring with an Underprovisioned Query Processor (Extended Version)},
    Institution = {EECS Department, University of California, Berkeley},
    Year = {2006},
    Month = {Apr},
    URL = {http://www.eecs.berkeley.edu/Pubs/TechRpts/2006/EECS-2006-38.html},
    Number = {UCB/EECS-2006-38},
    Abstract = {Many of the data sources used in stream query processing
are known to exhibit bursty behavior. We focus here
on passive network monitoring, an application in which the
data rates typically exhibit a large peak-to-average ratio.
Provisioning a stream query processor to handle peak rates
in such a setting can be prohibitively expensive.
In this paper, we propose to solve this problem by provisioning
the query processor for typical data rates instead
of much higher peak data rates. To enable this strategy, we
present mechanisms and policies for managing the tradeoffs
between the latency and accuracy of query results when
bursts exceed the steady-state capacity of the query processor.
We describe the current status of our implementation and
present experimental results on a testbed network monitoring
application to demonstrate the utility of our approach.}
}

EndNote citation:

%0 Report
%A Reiss, Frederick Ralph
%A Hellerstein, Joseph M.
%T Declarative Network Monitoring with an Underprovisioned Query Processor (Extended Version)
%I EECS Department, University of California, Berkeley
%D 2006
%8 April 10
%@ UCB/EECS-2006-38
%U http://www.eecs.berkeley.edu/Pubs/TechRpts/2006/EECS-2006-38.html
%F Reiss:EECS-2006-38