{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T14:41:10Z","timestamp":1740148870649,"version":"3.37.3"},"reference-count":30,"publisher":"Springer Science and Business Media LLC","issue":"3-4","license":[{"start":{"date-parts":[[2023,8,18]],"date-time":"2023-08-18T00:00:00Z","timestamp":1692316800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,8,18]],"date-time":"2023-08-18T00:00:00Z","timestamp":1692316800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Ann. Telecommun."],"published-print":{"date-parts":[[2024,4]]},"DOI":"10.1007\/s12243-023-00982-7","type":"journal-article","created":{"date-parts":[[2023,8,18]],"date-time":"2023-08-18T02:01:31Z","timestamp":1692324091000},"page":"149-163","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Automated slow-start detection for anomaly root cause analysis and BBR identification"],"prefix":"10.1007","volume":"79","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-1416-3121","authenticated-orcid":false,"given":"Ziad","family":"Tlaiss","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alexandre","family":"Ferrieux","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Isabel","family":"Amigo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Isabelle","family":"Hamchaoui","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sandrine","family":"Vaton","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,8,18]]},"reference":[{"key":"982_CR1","doi-asserted-by":"publisher","unstructured":"Claise B (2004) Cisco Systems NetFlow Services Export Version 9. RFC Editor. https:\/\/doi.org\/10.17487\/RFC3954. https:\/\/www.rfc-editor.org\/info\/rfc3954","DOI":"10.17487\/RFC3954"},{"key":"982_CR2","unstructured":"Yu M, Jose L, Miao R (2013) Software defined traffic measurement with OpenSketch. In: Proceedings of the 10th USENIX Conference on Networked Systems Design and Implementation. nsdi\u201913, pp. 29\u201342. USENIX Association, USA"},{"key":"982_CR3","doi-asserted-by":"publisher","unstructured":"Panchen S, McKee N, Phaal P (2001) InMon Corporation\u2019s sFlow: a method for monitoring traffic in switched and routed networks. RFC Editor. https:\/\/doi.org\/10.17487\/RFC3176. https:\/\/www.rfc-editor.org\/info\/rfc3176","DOI":"10.17487\/RFC3176"},{"key":"982_CR4","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1007\/978-3-540-31966-5_10","volume-title":"Passive and Active Network Measurement","author":"B Veal","year":"2005","unstructured":"Veal B, Li K, Lowenthal D (2005) New methods for passive estimation of TCP roundtrip times. In: Dovrolis C (ed) Passive and Active Network Measurement. Springer, Berlin, Heidelberg, pp 121\u2013134"},{"key":"982_CR5","doi-asserted-by":"publisher","unstructured":"Benko P, Veres A (2002) A passive method for estimating end-to-end TCP packet loss. In: Global Telecommunications Conference, 2002. GLOBECOM \u201902. IEEE, vol. 3, pp. 2609\u201326133. https:\/\/doi.org\/10.1109\/GLOCOM.2002.1189102","DOI":"10.1109\/GLOCOM.2002.1189102"},{"key":"982_CR6","doi-asserted-by":"publisher","unstructured":"Iyengar J, Thomson M (2021) QUIC: a UDP-based multiplexed and secure transport. RFC Editor. https:\/\/doi.org\/10.17487\/RFC9000. https:\/\/www.rfc-editor.org\/info\/rfc9000","DOI":"10.17487\/RFC9000"},{"issue":"5","key":"982_CR7","doi-asserted-by":"publisher","first-page":"64","DOI":"10.1145\/1400097.1400105","volume":"42","author":"S Ha","year":"2008","unstructured":"Ha S, Rhee I, Xu L (2008) CUBIC: a new TCP-friendly high-speed TCP variant. SIGOPS Oper Syst Rev 42(5):64\u201374. https:\/\/doi.org\/10.1145\/1400097.1400105","journal-title":"SIGOPS Oper Syst Rev"},{"key":"982_CR8","unstructured":"Cardwell N, Cheng Y, Yeganeh SH, Swett I, Jacobson V (2022) BBR congestion control. Internet-Draft draft-cardwell-iccrg-bbr-congestion-control-02, Internet Engineering Task Force (March). Work in Progress. https:\/\/datatracker.ietf.org\/doc\/draft-cardwell-iccrg-bbr-congestion-control\/02\/"},{"key":"982_CR9","doi-asserted-by":"publisher","unstructured":"Tlaiss Z, Hamchaoui I, Amigo I, Ferrieux A, Vaton S (2023) Troubleshooting enhancement with automated slow-start detection. In: 2023 26th Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN), pp. 129\u2013136. https:\/\/doi.org\/10.1109\/ICIN56760.2023.10073485","DOI":"10.1109\/ICIN56760.2023.10073485"},{"key":"982_CR10","doi-asserted-by":"publisher","unstructured":"Floyd S (2000) Congestion control principles. RFC Editor. https:\/\/doi.org\/10.17487\/RFC2914. https:\/\/www.rfc-editor.org\/info\/rfc2914","DOI":"10.17487\/RFC2914"},{"key":"982_CR11","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3366693","volume":"3","author":"A Mishra","year":"2019","unstructured":"Mishra A, Sun X, Jain A, Pande S, Joshi R, Leong B (2019) The great internet TCP congestion control census. Proceed ACM Measure Anal Comput Syst 3:1\u201324. https:\/\/doi.org\/10.1145\/3366693","journal-title":"Proceed ACM Measure Anal Comput Syst"},{"key":"982_CR12","unstructured":"Balasubramanian P, Huang Y, Olson M (2023) HyStart++: modified slow start for TCP. Internet-Draft draft-ietf-tcpm-hystartplusplus-13, Internet Engineering Task Force (January). Work in Progress. https:\/\/datatracker.ietf.org\/doc\/draft-ietf-tcpm-hystartplusplus\/13\/"},{"key":"982_CR13","doi-asserted-by":"publisher","unstructured":"Blanton E, Paxson DV, Allman M (2009) TCP congestion control. RFC Editor. https:\/\/doi.org\/10.17487\/RFC5681. https:\/\/www.rfc-editor.org\/info\/rfc5681","DOI":"10.17487\/RFC5681"},{"key":"982_CR14","doi-asserted-by":"publisher","unstructured":"R\u00fcth J, Kunze I, Hohlfeld O (2019) TCP\u2019s initial window\u2013deployment in the wild and its impact on performance. IEEE Trans Netw Serv Manage 16(2):389\u2013402. https:\/\/doi.org\/10.1109\/TNSM.2019.2896335","DOI":"10.1109\/TNSM.2019.2896335"},{"key":"982_CR15","doi-asserted-by":"publisher","unstructured":"Stevens WR (1997) TCP slow start, congestion avoidance, fast retransmit, and fast recovery algorithms. RFC Editor. https:\/\/doi.org\/10.17487\/RFC2001. https:\/\/www.rfc-editor.org\/info\/rfc2001","DOI":"10.17487\/RFC2001"},{"issue":"2","key":"982_CR16","doi-asserted-by":"publisher","first-page":"58","DOI":"10.1145\/3009824","volume":"60","author":"N Cardwell","year":"2017","unstructured":"Cardwell N, Cheng Y, Gunn CS, Yeganeh SH, Jacobson V (2017) BBR: congestion-based congestion control. Commun ACM 60(2):58\u201366. https:\/\/doi.org\/10.1145\/3009824","journal-title":"Commun ACM"},{"key":"982_CR17","doi-asserted-by":"publisher","unstructured":"Sanders C, Smith J (2014) Applied network security monitoring, p. Syngress, Boston. https:\/\/doi.org\/10.1016\/B978-0-12-417208-1.09984-0 . https:\/\/www.sciencedirect.com\/science\/article\/pii\/B9780124172081099840","DOI":"10.1016\/B978-0-12-417208-1.09984-0"},{"key":"982_CR18","doi-asserted-by":"publisher","unstructured":"Casey E, Altheide C, Daywalt C, de Donno A, Forte D, Holley JO, Johnston A, van der Knijff R, Kokocinski A, Luehr PH, Maguire T, Pittman RD, Rose CW, Schwerha JJ, Shaver D, Smith JR (2010) Handbook of digital forensics and investigation, pp. 1\u201317. Academic Press, San Diego. https:\/\/doi.org\/10.1016\/B978-0-12-374267-4.00001-X. https:\/\/www.sciencedirect.com\/science\/article\/pii\/B978012374267400001X","DOI":"10.1016\/B978-0-12-374267-4.00001-X"},{"key":"982_CR19","doi-asserted-by":"publisher","unstructured":"Transmission control protocol. RFC Editor (1981). https:\/\/doi.org\/10.17487\/RFC0793. https:\/\/www.rfc-editor.org\/info\/rfc793","DOI":"10.17487\/RFC0793"},{"key":"982_CR20","unstructured":"Kary: Understanding the tcptrace time-sequence graph in wireshark. https:\/\/packetbomb.com\/understanding-the-tcptrace-time-sequence-graph-in-wireshark\/"},{"key":"982_CR21","unstructured":"Tlaiss Z (2021) Anomaly root cause diagnosis from active and passive measurement analysis. In: 2021 33th International Teletraffic Congress (ITC-33), pp. 1\u20133"},{"key":"982_CR22","doi-asserted-by":"publisher","unstructured":"Hagos DH, Engelstad PE, Yazidi A, Kure O (2018) General TCP state inference model from passive measurements using machine learning techniques. IEEE Access 6:28372\u201328387. https:\/\/doi.org\/10.1109\/ACCESS.2018.2833107","DOI":"10.1109\/ACCESS.2018.2833107"},{"key":"982_CR23","unstructured":"Padhye J, Floyd S (2001) On inferring TCP behavior. ACM SIGCOMM Comput Commun Rev. doi 10(1145\/383059)"},{"key":"982_CR24","doi-asserted-by":"publisher","unstructured":"Yang P, Luo W, Xu L, Deogun J, Lu Y (2011) TCP congestion avoidance algorithm identification. In: 2011 31st International Conference on Distributed Computing Systems, pp. 310\u2013321. https:\/\/doi.org\/10.1109\/ICDCS.2011.27","DOI":"10.1109\/ICDCS.2011.27"},{"key":"982_CR25","doi-asserted-by":"publisher","unstructured":"Jaiswal S, Iannaccone G, Diot C, Kurose J, Towsley D (2004) Inferring TCP connection characteristics through passive measurements, pp. 1582\u201315923. https:\/\/doi.org\/10.1109\/INFCOM.2004.1354571","DOI":"10.1109\/INFCOM.2004.1354571"},{"key":"982_CR26","unstructured":"Toshihiko Kato RY, Leelianou Yongxialee Ohzahata S (2016) A study on how to characterize TCP congestion control algorithms from unidirectional packet traces. ICIMP 2016 : The Eleventh International Conference on Internet Monitoring and Protection"},{"key":"982_CR27","doi-asserted-by":"publisher","unstructured":"Kato T, Yan X, Yamamoto R, Ohzahata S (2018) Identification of TCP congestion control algorithms from unidirectional packet traces, pp. 22\u201327. https:\/\/doi.org\/10.1145\/3291842.3291922","DOI":"10.1145\/3291842.3291922"},{"issue":"4","key":"982_CR28","doi-asserted-by":"publisher","first-page":"309","DOI":"10.1145\/964725.633055","volume":"32","author":"Y Zhang","year":"2002","unstructured":"Zhang Y, Breslau L, Paxson V, Shenker S (2002) On the characteristics and origins of internet flow rates. SIGCOMM Comput Commun Rev 32(4):309\u2013322. https:\/\/doi.org\/10.1145\/964725.633055","journal-title":"SIGCOMM Comput Commun Rev"},{"issue":"4","key":"982_CR29","doi-asserted-by":"publisher","first-page":"139","DOI":"10.1145\/2829988.2787496","volume":"45","author":"C Guo","year":"2015","unstructured":"Guo C, Yuan L, Xiang D, Dang Y, Huang R, Maltz D, Liu Z, Wang V, Pang B, Chen H, Lin Z-W, Kurien V (2015) Pingmesh: a large-scale system for data center network latency measurement and analysis. SIGCOMM Comput Commun Rev 45(4):139\u2013152. https:\/\/doi.org\/10.1145\/2829988.2787496","journal-title":"SIGCOMM Comput Commun Rev"},{"issue":"4","key":"982_CR30","doi-asserted-by":"publisher","first-page":"479","DOI":"10.1145\/2829988.2787483","volume":"45","author":"Y Zhu","year":"2015","unstructured":"Zhu Y, Kang N, Cao J, Greenberg A, Lu G, Mahajan R, Maltz D, Yuan L, Zhang M, Zhao BY, Zheng H (2015) Packet-level telemetry in large datacenter networks. SIGCOMM Comput Commun Rev 45(4):479\u2013491. https:\/\/doi.org\/10.1145\/2829988.2787483","journal-title":"SIGCOMM Comput Commun Rev"}],"container-title":["Annals of Telecommunications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s12243-023-00982-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s12243-023-00982-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s12243-023-00982-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,4,12]],"date-time":"2024-04-12T08:40:43Z","timestamp":1712911243000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s12243-023-00982-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,18]]},"references-count":30,"journal-issue":{"issue":"3-4","published-print":{"date-parts":[[2024,4]]}},"alternative-id":["982"],"URL":"https:\/\/doi.org\/10.1007\/s12243-023-00982-7","relation":{},"ISSN":["0003-4347","1958-9395"],"issn-type":[{"type":"print","value":"0003-4347"},{"type":"electronic","value":"1958-9395"}],"subject":[],"published":{"date-parts":[[2023,8,18]]},"assertion":[{"value":"10 May 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 August 2023","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 August 2023","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}