Re: [Nmlrg] I-D Action: draft-jiang-nmlrg-traffic-machine-learning-00.txt

[Brian E Carpenter <[e-mail]>]

Hi,

Just a couple of comments on this interesting draft:

> 1.  Introduction
...
> 
>    Among many aspects of networks, the network traffic is one of the
>    most complicated managed objectives.  Its volume is rapidly growing
>    along with the Internet explosion.  It is always dynamically
>    changing.  Most network traffic flows only last a few minutes, or
>    even shorter.

That may be true today, but perhaps not in the future. Interactive flows
for audio and video may last much longer, and with RTCWEB they will become
more common. They also present unique difficulties, because a flow may be
very high data rate at one moment in one direction (A is speaking to B)
but then unpredictably the opposite (B is speaking to A). Or a video
conference might switch from presentation (A is speaking to everybody)
to Q/A mode (individuals are speaking to A). The flows will be maintained
but their parameters will change completely.

This makes the problem much more interesting - a measurement made at time T1
will not statistically predict the flow at time T2.

...
> 3.1.  Data of the Network Traffic
...
>    Data within communication protocols  The user contents are
>       encapsulated in layered communication protocols.  Many information
>       are contained within the protocol headers, for example the source
>       and destination IP addresses in the IP header, the port numbers in
>       the TCP/UDP header, etc.  

I think it is useful to mention the traffic class (DSCP) and flow label,
because these are guaranteed to be available even if the payload is
not available. Even the ECN bits might be useful, too.

...
> 5.  Security Considerations

I think that you should discuss Privacy Considerations. There is clearly
a problem, since the data one might capture for ML is exactly the data captured
by commercial or government surveillance. With the new emphasis on resisting such surveillance, the ML approach will have to
find a way to deal with this.
Anonymization of the collected data is one approach that is commonly used in
measurement studies.

Regards
   Brian Carpenter

On 03/06/2016 21:25, [e-mail] wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> 
> 
>         Title           : Use Cases of Applying Machine Learning Mechanism with Network Traffic
>         Authors         : Sheng Jiang
>                           Bing Liu
>                           Panagiotis Demestichas
>                           Jerome Francois
>                           Giovane C. M. Moura
>                           Pere Barlet
> 	Filename        : draft-jiang-nmlrg-traffic-machine-learning-00.txt
> 	Pages           : 18
> 	Date            : 2016-06-03
> 
> Abstract:
>    This document introduces a set of use cases in which machine learning
>    technologies are applied to network traffic relevant activities,
>    including machine learning based traffic classification, traffic
>    management, etc.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-jiang-nmlrg-traffic-machine-learning/
> 
> There's also a htmlized version available at:
> https://tools.ietf.org/html/draft-jiang-nmlrg-traffic-machine-learning-00
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________
> I-D-Announce mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/i-d-announce
> Internet-Draft directories: http://www.ietf.org/shadow.html
> or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
>