IP traceback through (authenticated) deterministic flow marking: an empirical evaluation

EURASIP Journal on Information Security

Table 8 The size of the flow table in the DFM approach for each of the five evaluation data sets

Data set	Darpa 1999	Darpa 1999	CISDA	MAWI	Dal2010
	attack	attack-free	Oct 2012	Dec 2012
Number of concurrent flows	843	241	1,131	930	1,021
Flow table size at the edge router (byte)	18.5	5.5	25	20.5	22.5
Reconstruction table size at the destination (byte)	17	5	23	19	20.5

The required space for each flow in the flow table is 180 bits and in the reconstruction table is 164 bits (13 bytes flow ID and 60 bits identification data).