Analyzing and generating network traffic using an improved Markov Modulated Poisson Process model with one bursty state and a plurality of idle states
View Patent ↗Methods and products are disclosed for analyzing network traffic using an improved Markov Modulated Poisson Process Model with one bursty state and a plurality of idle states that include: establishing a time scale of operation for each state in the improved MMPP model; establishing a transition value for each state in dependence upon the time scale of operation for the state; measuring inter-arrival times between individual packets received in one or more network adapters; and determining a current state for the network traffic independence upon the measured inter-arrival time of a most recently received packet and the transition values.
1. A method for analyzing network traffic using an improved Markov Modulated Poisson Process (‘MMPP’) Model with one bursty state and a plurality of idle states, the method comprising:
establishing a time scale of operation for each state in the improved MMPP model, the improved MMPP model comprising a single MMPP model, the single MMPP model comprising only one bursty state and at least two idle states, wherein the time scale of operation for a particular state differs from the time scale of operation for all other states by at least one order of magnitude;
establishing a transition value for each state in dependence upon the time scale of operation for the state;
measuring inter-arrival times between individual packets received in one or more network adapters; and
determining a current state for the network traffic in dependence upon the measured inter-arrival time of a most recently received packet and the transition values.
2. The method of claim 1 further comprising:
predicting an inter-arrival time for a next packet to be received in dependence upon the current state;
measuring an actual inter-arrival time for the next packet; and
adjusting the current state in dependence upon the predicted inter-arrival time and the actual inter-arrival time.
3. The method of claim 1 further comprising adjusting the transition value for each state in dependence upon the measured inter-arrival times.
4. The method of claim 3 wherein adjusting the transition value for each state in dependence upon the measured inter-arrival times further comprises:
tracking changes in the inter-arrival times between individual data packets received during each state; and
adjusting the transition value for each state in dependence upon the tracked changes for the state.
5. The method of claim 1 wherein the transition value for each state is a transition value λ mean that is a mean inter-arrival time of the packets received during the state.
6. The method of claim 1 wherein:
the transition value for the bursty state is a transition value λ B max that represents an upper boundary for the inter-arrival times in a bursty state; and
the transition value for each idle state is a transition value λ I min that represents a lower boundary for the inter-arrival times in each idle state.
7. The method of claim 1 wherein analyzing network traffic using an improved MMPP Model with one bursty state and a plurality of idle states is carried out in real-time.
8. The method of claim 1 wherein the improved MMPP Model with one bursty state and a plurality of idle states further comprises two barrier states between the bursty state and each idle state in the improved MMPP Model.
9. A method for generating network traffic using an improved Markov Modulated Poisson Process (‘MMPP’) Model with one bursty state and a plurality of idle states, the method comprising:
establishing a time scale of operation for each state in the model, the improved MMPP model comprising a single MMPP model, the single MMPP model comprising only one bursty state and at least two idle states, wherein the time scale of operation for a particular state differs from the time scale of operation for all other states by at least one order of magnitude;
generating an inter-arrival time for a next packet to be transmitted in dependence upon a current state for the improved MMPP model; and
transmitting, from a network adapter, a packet in dependence upon the generated inter-arrival time.
10. The method of claim 9 further comprising:
establishing a transition value for each state in dependence upon the time scale of operation for the state; and
determining a next state for the network traffic in dependence upon the generated inter-arrival time and the transition values.
11. A computer program product for analyzing network traffic using an improved Markov Modulated Poisson Process (‘MMPP’) Model with one bursty state and a plurality of idle states, the computer program product disposed upon a computer-readable recording medium, the computer program product comprising computer program instructions capable of:
establishing a time scale of operation for each state in the improved MMPP model, the improved MMPP model comprising a single MMPP model, the single MMPP model comprising only one bursty state and at least two idle states, wherein the time scale of operation for a particular state differs from the time scale of operation for all other states by at least one order of magnitude;
establishing a transition value for each state in dependence upon the time scale of operation for the state;
measuring inter-arrival time between individual packets received in one or more network adapters; and
determining a current state for the network traffic in dependence upon the measured inter-arrival time of a most recently received packet and the transition values.
12. The computer program product of claim 11 further comprising computer program instructions capable of:
predicting an inter-arrival time for a next packet to be received in dependence upon the current state;
measuring an actual inter-arrival time for the next packet; and
adjusting the current state in dependence upon the predicted inter-arrival time and the actual inter-arrival time.
13. The computer program product of claim 11 further comprising computer program instructions capable of adjusting the transition value for each state in dependence upon the measured inter-arrival times.
14. The computer program product of claim 13 wherein adjusting the transition value for each state in dependence upon the measured inter-arrival times further comprises:
tracking changes in the inter-arrival times between individual data packets received during each state; and
adjusting the transition value for each state in dependence upon the tracked changes for the state.
15. The computer program product of claim 11 wherein the transition value for each state is a transition value λ mean that is a mean inter-arrival time of the packets received during the state.
16. The computer program product of claim 11 wherein:
the transition value for the bursty state is a transition value λ B max that represents an upper boundary for the inter-arrival times in a bursty state, and
the transition value for each idle state is a transition value λ 1 min that represents a lower boundary for the inter-arrival times in each idle state.