Bitmap algorithms for counting active flows on high speed links

Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC

Volumn , Issue , 2003, Pages 153-166

  Estan, Cristian ^a   Varghese, George ^a   Fisk, Mike ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Counting flows; Network traffic measurement

Indexed keywords

ALGORITHMS; CONGESTION CONTROL (COMMUNICATION); NETWORK PROTOCOLS; PACKET NETWORKS; QUALITY OF SERVICE; STATIC RANDOM ACCESS STORAGE;

COUNTING FLOWS; DENIAL OF SERVICE (DOS); HIGH SPEED LINKS; NETWORK TRAFFIC MANAGEMENT;

TELECOMMUNICATION LINKS;

EID: 19544394713     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/948224.948225     Document Type: Conference Paper

References (19)

1. Cisco offers wire-speed intrusion detection, December 2000. http://www.nwfusion.com/reviews/2000/1218rev2.html.
2. Nick Duffield, Carsten Lund, and Mikkel Thorup. Properties and prediction of flow statistics from sampled packet streams. In SIGCOMM Internet Measurement Workshop, November 2002.
3. Cristian Estan and George Varghese. New directions in traffic measurement and accounting. In Proceedings of the ACM SIGCOMM, August 2002.
4. C. Estan, G. Varghese, and M. Fisk. Bitmap algorithms for counting active flows on high speed links. Technical Report 0738, CSE Department, UCSD, March 2003.
5. Wenjia Fang and Larry Peterson. Inter-as traffic patterns and their implications. In Proceedings of IEEE GLOBECOM, December 1999.
6. Philippe Flajolet and G. Nigel Martin. Probabilistic counting algorithms for data base applications. Journal of Computer and System Sciences, 31(2):182-209, October 1985.
7. Fyodor. Remote OS detection via TCP/IP stack fingerprinting. Phrack, (54), December 1998.
8. D. Katabi, M. Handley, and C. Rhors. Congestion control for high bandwidth-delay product networks. In Proceedings of the ACM SIGCOMM, August 2002.
9. Ken Keys, David Moore, R. Koga, E. Lagache, M. Tesch, and K. Claffy. The architecture of coralreef: an internet traffic monitoring software suite. PAM2001, Workshop on Passive and Active Measurements, RIPE, 2001.
10. R. Mahajan, S. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker. Controlling high bandwidth aggregates in the network. ACM SIGCOMM CCR, 32(3):62-73, July 2002.
11. David Moore. Personal conversation, also see caida analysis of code-red, 2001. http://www.caida.org/analysis/security/coda-red/.
12. Cisco netflow. http://www.cisco.com/warp/public/732/Tech/netflow.
13. Riverstone Networks. Lfap: Lightweight flow accounting protocol, http://www.riverstonenet.com/technology/accounting-for_profitability.shtml.
14. David Plonka. Flowscan: A network traffic flow reporting and visualization tool, In USENIX LISA, pages 305-317, December 2000.
15. Martin Roesch. Snort - lightweight intrusion detection for networks. In Proceedings of the 13th Systems Administration Conference. USENIX, 1999.
16. Stuart Staniford, J. Hoagland, and J. McAlerney. Practical automated detection of stealthy portscans. Journal of Computer Security, (10), 2002.
17. I. Stoica, S. Shenker, and H. Zhang. Core-stateless fair queueing: A scalable architecture to approximate fair bandwidth allocations in high speed networks. In Proceedings of the ACM SIGCOMM, September 1998.
18. Kyu-Young Whang, Brad T. Vander-Zanden, and Howard M. Taylor. A linear-time probabilistic counting algorithm for database applications. ACM Transactions on Database Systems, 15(2), 1990.
19. Ming-Young You and Cheng-Shang Chang. Resampling for wireless access. In Proceedings of IEEE PIMRC, June 1996.