Search: onr:"swepub:oai:DiVA.org:kau-10922" >
Syslog Performance :
Syslog Performance : Data Modeling and Transport
-
- Rajiullah, Mohammad, 1981- (author)
- Karlstads universitet,Avdelningen för datavetenskap,Datavetenskap
-
- Lundin, Reine, 1974- (author)
- Karlstads universitet,Avdelningen för datavetenskap,Centrum för HumanIT,Datavetenskap
-
- Lindskog, Stefan, 1967- (author)
- Karlstads universitet,Avdelningen för datavetenskap,Centrum för HumanIT,Datavetenskap
-
show more...
-
- Brunström, Anna, 1967- (author)
- Karlstads universitet,Avdelningen för datavetenskap,Centrum för HumanIT,Datavetenskap
-
show less...
-
(creator_code:org_t)
- Norway : IEEE Press, 2011
- 2011
- English.
-
In: Proceedings of the 3rd International Workshop on Security and Communication Networks (IWSCN 2011). - Norway : IEEE Press. ; , s. 31-37
- Related links:
-
http://iwscn2011.hig...
-
show more...
-
https://urn.kb.se/re...
-
show less...
Abstract
Subject headings
Close
- Syslog is one of the basic methods for event logging in computer networks. Log messages that are generated by syslog can be used for a number of purposes, including optimizing system performance, system auditing, and investigating malicious activities in a computer network. Considering all these attractive uses, both timeliness and reliability is needed when syslog messages are transported over a network. The unreliable transport protocol UDP was specified in the original syslog specification; later a reliable transport service based on TCP was also proposed. However, TCP is a costly alternative in terms of delay. In our previous work, we introduced the partially reliable extension of SCTP, PR-SCTP, as a transport service for syslog, trading reliability against timeliness by prioritizing syslog messages. In this work, we first model syslog data using real syslog traces from an operational network. The model is then used as input in the performance evaluation of PR-SCTP. In the experiments, real congestion is introduced in the network by running several competing flows. Although PR-SCTP clearly outperformed TCP and SCTP in our previous work, our present evaluations show that PR-SCTP performance is largely influenced by the syslog data size characteristics
Subject headings
- NATURVETENSKAP -- Data- och informationsvetenskap -- Datavetenskap (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Computer Sciences (hsv//eng)
Keyword
- Computer Science
- Datavetenskap
Publication and Content Type
- ref (subject category)
- kon (subject category)
To the university's database