@inproceedings{8b36343a64b04f2e9da838fb8de65122,
title = "A comparison of syslog and IS-IS for network failure analysis",
abstract = "Accurate reporting and analysis of network failures has historically required instrumentation (e.g., dedicated tracing of routing protocol state) that is rarely available in practice. In previous work, our group has proposed that a combination of common data sources could be substituted instead. In particular, by opportunistically stitching together data from router configuration logs and syslog messages, we demonstrated that a granular picture of network failures could be resolved and verified with human trouble tickets. In this paper, we more fully evaluate the fidelity of this approach, by comparing with high-quality {"}ground truth{"} data derived from an analysis of contemporaneous IS-IS routing protocol messages. We identify areas of agreement and disparity between these data sources, as well as potential ways to correct disparities when possible.",
keywords = "IS-IS, Measurement, Reliability, Syslog",
author = "Daniel Turner and Kirill Levchenko and Stefan Savage and Snoeren, {Alex C.}",
year = "2013",
doi = "10.1145/2504730.2504766",
language = "English (US)",
isbn = "9781450319539",
series = "Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC",
pages = "433--439",
booktitle = "IMC 2013 - Proceedings of the 13th ACM Internet Measurement Conference",
note = "13th ACM Internet Measurement Conference, IMC 2013 ; Conference date: 23-10-2013 Through 25-10-2013",
}