%0 Conference Proceedings %T Processing of Flow Accounting Data in Java: Framework Design and Performance Evaluation %+ Institute of Communication Networks and Computer Engineering (IKR) %A Kögel, Jochen %A Scholz, Sebastian %< avec comité de lecture %( Lecture Notes in Computer Science %B 16th EUNICE/IFIP WG 6.6 Workshop on Networked Services and Applications - Engineering, Control and Management (EUNICE) %C Trondheim, Norway %Y Finn Arve Aagesen; Svein Johan Knapskog %I Springer %3 Networked Services and Applications - Engineering, Control and Management %V LNCS-6164 %P 177-187 %8 2010-06-28 %D 2010 %R 10.1007/978-3-642-13971-0_17 %Z Computer Science [cs]/Digital Libraries [cs.DL]Conference papers %X Flow Accounting is a passive monitoring mechanism implemented in routers that gives insight into traffic behavior and network characteristics. However, processing of Flow Accounting data is a challenging task, especially in large networks where the rate of Flow Records received at the collector can be very high. We developed a framework for processing of Flow Accounting data in Java. It provides processing blocks for aggregation, sorting, statistics, correlation, and other tasks. Besides reading data from files for offline analysis, it can also directly process data received from the network. In terms of multithreading and data handling, the framework is highly configurable, which allows performance tuning depending on the given task. For setting these parameters there are several trade-offs concerning memory consumption and processing overhead. In this paper, we present the framework design, study these trade-offs based on a reference scenario and examine characteristics caused by garbage collection. %G English %2 https://inria.hal.science/hal-01056499/document %2 https://inria.hal.science/hal-01056499/file/026_FlowProc_camera_ready_28Final_Version_29_v2.pdf %L hal-01056499 %U https://inria.hal.science/hal-01056499 %~ IFIP-LNCS %~ IFIP %~ IFIP-LNCS-6164 %~ IFIP-TC %~ IFIP-TC6 %~ IFIP-WG6-6 %~ IFIP-EUNICE %~ IFIP-2010