Packet trace manipulation framework for test labs

Proceedings of the 2004 ACM SIGCOMM Internet Measurement Conference, IMC 2004

Volumn , Issue , 2004, Pages 251-256

  Rupp, Andy ^a   Dreger, Holger ^b   Feldmann, Anja ^b   Sommer, Robin ^b  

^a RUHR UNIVERSITY BOCHUM   (Germany)

^b TECHNICAL UNIVERSITY OF MUNICH   (Germany)

Author keywords

Evaluation; Measurement; Network; Network intrusion detection; Trace generation

Indexed keywords

NETWORK INTRUSION DETECTION SYSTEMS (NIDS); NETWORK SIMULATORS; PROTOCOL LAYERS; TRACE GENERATION;

COMPUTER SOFTWARE; COMPUTER SYSTEM FIREWALLS; MATHEMATICAL MODELS; NETWORK PROTOCOLS; PACKET NETWORKS; ROUTERS; SERVERS; TELECOMMUNICATION TRAFFIC;

COMPUTER NETWORKS;

EID: 14944383202     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. Advanced pipes and filters architecture & TTM plugin package project, http ://www.net.informatik.tu-muenchen. de/~rdc/.
2. S. Bajaj, L. Breslau, D. Estrin, K. Fall, S. Floyd, P. Haldar, M. Handley, A. Helmy, J. Heidemann, P. Huang, S. Kumar, S. McCanne, R. Rejaie, P. Sharma, S. Shenker, K. Varadhan, H. Yu, Y. Xu, and D. Zappala. Virtual InterNetwork Testbed: Status and research agenda. Technical Report 98-678, University of Southern California, July 1998.
3. F. Buschmann, R. Meunier, H. Rohnert, P. Sommerlad, and M. Stal. Pattern-Oriented Software Architecture, A System of Patterns. John Wiley & Sons Ltd, Chichester, England, 1996.
4. Cisco Netflow. http://www.cisco.com/warp/public/732/Teeh/nmp/natflow/ index.shtml.
5. H. Dreger, A. Feldmann, V. Paxson, and R. Sommer. Operational experiences with high-volume network intrusion detection. In Proc. 11th ACM Conference on Computer and Communications Security, 2004.
6. ENDACE measurement systems, http://www.endace.com/.
7. C. Estan, K. Keys, D. Moore, and G. Varghese. Building a Better NetFlow. In Proc. of the ACM SIGCOMM, 2004.
8. A. Feldmann, H. Kong, O. Maennel, and A. Tudor. Measuring BGP pass-through times. In Proc. of the Passive and Active Measurement Workshop (PAM), 2004.
9. W. Feng, A. Goel, A. Bezzaz, W. Feng, and J. Walpole. TCPivo: A High-Performance Packet Replay Engine. In Proc. of the ACM SIGCOMM Workshop on Models, Methods and Tools for Reproducible Network Research, 2003.
10. P. Kamath, K. Lan, J. Heidemann, J. Bannister, and J. Touch. Generation of High Bandwidth Network Traffic Traces. In Proc. International Symposium on Modeling, Analysis and Simulation of Computer and Telecommunication Systems, 2002.
11. E. Kohler, R. Morris, B. Chen, J. Jannotti, and M. F. Kaashoek. The click modular router. ACM Transactions on Computer Systems, 3(18), 2000.
12. C. Kreibich. Design and Implementation of Netdude, a Framework for Packet Trace Manipulation. In Proc. Usenix Technical Conference, Freenix Track, 2004.
13. R. Lippmann, R. K. Cunningham, D. J. Fried, I. Graf, K. R. Kendall, S. E. Webster, and M. A. Zissman. Results of the 1998 DARPA Offline Intrusion Detection Evaluation. In Proc. Recent Advances in Intrusion Detection, 1999.
14. S. McCanne and V. Jacobson. The bsd packet filter: A new architecture for user-level packet capture. In U. Association, editor, Proc. Winter 1993 USENIX Conference. USENIX Association, 1993.
15. P. Phaal, S. Panchen, and N. McKee. sFlow, 2001. RFC 3176.
16. A. Rupp. A Software System for Packet Trace Customization with Application to NIDS Evaluation. Master's thesis, Universität des Saarlandes, Germany, 2004.
17. The tcpdump/libpcap project, http://www.tcpdump.org/.
18. The tcpreplay project, http://tcpreplay.sourceforge.net/.
19. M. Völter. PluggableComponent - A Pattern for Interactive System Configuration. In Proc. of the 4th European Conference on Pattern Languages of Programming and Computing, 1999.