Network probe for flexible flow monitoring

Proceedings - 2008 IEEE Workshop on Design and Diagnostics of Electronic Circuits and Systems, DDECS

Volumn , Issue , 2008, Pages 213-218

  Žádník, Martin ^a   Kořenek, Jan ^a   Kobierský, Petr ^b   Lengál, Ondřej ^b  

^a BRNO UNIVERSITY OF TECHNOLOGY   (Czech Republic)

^b CESNET   (Czech Republic)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER ARCHITECTURE; ELECTRON TUBES; FIELD PROGRAMMABLE GATE ARRAYS (FPGA); INTERNET; MARKUP LANGUAGES; NETWORKS (CIRCUITS); SPEED;

ELECTRONIC CIRCUITS; HIGH-SPEED LINKS; NETWORK TOOLS; SOFTWARE SOLUTIONS;

COMPUTER NETWORKS;

EID: 50649117349     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DDECS.2008.4538788     Document Type: Conference Paper

References (20)

1. Y. Gu, A. McCallum, and D. Towsley, "Detecting anomalies in network traffic using maximum entropy 2005. [Online]. Available: http://citeseer.ist. psu.edu/gu05detecting.html
2. P. Barford, J. Kline, D. Ploka, and A. Ron "A signal analysis of network traffic anomalies," 2002. [Online]. Available: http://citeseer.ist. psu.edu/barford02signal.html
3. J. D. Brutlag, "Aberrant behavior detection in time series for network monitoring," in LISA '00: Proceedings of the 14th USENIX conference on System administration. Berkeley, CA, USA: USENIX Association, 2000, pp. 139-146.
4. "Iana. internet assigned numbers authority (iana)." [Online]. Available: http://www.iana.org/assignments/port-numbers
5. S. Sen, O. Spatscheck, and D. Wang, "Accurate, scalable in-network identification of p2p traffic using application signatures," in WWWV '04: Proceedings of the 13th interational conference on World Wide Web. New York, NY, USA: ACM, 2004, pp. 512-521.
6. H. Dreger, A. Feldmann, M. Mai, V. Paxson, and R. Sommer, "Dynamic application-layer protocol analysis for network intrusion detection," in USENIX-SS'06: Proceedings of the 15th conference on USENIX Security Symposium. Berkeley, CA, USA: USENIX Association, 2006, pp. 18-18.
7. "Application layer packet classifier for linux." [Online]. Available: http://17-filter.sourceforge.net/
8. H. Jiang, A. W. Moore, Z. Ge, S. Jin, and J. Wang, "Lightweight Application Classification for Network Management" in Proceedings of the SIGCOMM Workshop on Interet Network Management 2007: The Five-Nines Workshop, August, 2007.
9. A. W. Moore and D. Zuev, "Internet traffic classification using bayesian analysis techniques," SIGMETRICS Perform. Eval. Rev., vol. 33, no. 1, pp. 50-60, 2005.
10. M. Crotti, M. Dusi, F. Gringoli, and L. Salgarelli, "Traffic classification through simple statistical fingerprinting," SIGCOMM Comput. Commun. Rev., vol. 37, no. 1, pp. 5-16, 2007.
11. J. P. Early, C. E. Brodley, and C. Rosenberg, "Behavioral Authentication of Server Flows," in ACSAC '03: Proceedings of the 19th Annual Computer Security Applications Conference. Washington, DC, USA: IEEE Computer Society, 2003, p. 46.
12. J. Erman, A. Mahanti, M. Arlitt, and C. Williamson, "Identifying and discriminating between web and peer-to-peer traffic in the network core," in WWW '07: Proceedings of the 16th international conference on World Wide Web. New York, NY, USA: ACM, 2007, pp. 883-892.
13. M. Roughan, S. Sen, O. Spatscheck, and N. Duffield, "Class-of- service mapping for QoS: a statistical signature-based approach to IP traffic classification," in IMC '04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement. New York, NY, USA: ACM, 2004, pp. 135-148.
14. T. Karagiannis, A. Broido, M. Faloutsos, and K. Claffy, "Transport layer identification of p2p traffic," 2004.
15. P. Haffner, S. Sen, O. Spatscheck, and D. Wang, "ACAS: automated construction of application signatures," in MineNet '05: Proceeding of the 2005 ACM SIGCOMM workshop on Mining network data. New York, NY, USA: ACM, 2005, pp. 197-202.
16. "Liberouter." [Online]. Available: http://www.liberouter.org
17. T. Martínek and J. Tobola, "Interconnection System for the NetCOPE Platform," CESNET, Tech. Rep. 34, Dec. 2006. [Online]. Available: http://www.cesnet.cz/doc/techzpravy/2006/netcope-interconnection/
18. P. Celeda, M. Kováčik, T. Koníř, V. Krmíček, P. Špringl, and M. Žádník, "FlowMon Probe," CESNET, Tech. Rep. 31, Dec. 2006. [Online]. Available: http://www.cesnet.cz/doc/techzpravy/2006/flowmon-probe/
19. M. Košek and J. Kořenek, "FlowContext: Flexible Platform for Multigigabit Stateful Packet Processing," in 2007 International Conference on Field Programmable Logic and Applications. IEEE Computer Society, 2007, pp. 804-807.
20. T. Dedek, T. Marek, and T. Martínek, "High Level Abstraction Language as an Alternative to Embeded Processors for Internet Packet Processing in FPGA," IN 2007 International Conference of Field Programmable Logic and Applications. IEEE Computer Society, 2007, pp. 648-651.