A passive network appliance for real-time network monitoring

Proceedings - 2011 7th ACM/IEEE Symposium on Architectures for Networking and Communications Systems, ANCS 2011

Volumn , Issue , 2011, Pages 239-249

  Schultz, Michael J ^a   Wun, Ben ^a   Crowley, Patrick ^a  

^a WASHINGTON UNIVERSITY IN ST LOUIS   (United States)

Author keywords

Computer Communication Networks; Network Monitoring; Network Operations

Indexed keywords

CAPACITY PLANNING; COMMODITY HARDWARE; COMPUTER COMMUNICATION NETWORKS; ITS EVALUATION; NETWORK ADMINISTRATOR; NETWORK APPLIANCES; NETWORK BEHAVIORS; NETWORK MONITORING; NETWORK OPERATIONS; NETWORK POLICY; REAL-TIME NETWORKS;

COMPUTER ARCHITECTURE; NETWORK ARCHITECTURE; NETWORK MANAGEMENT; REAL TIME SYSTEMS;

PASSIVE NETWORKS;

EID: 81255213875     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ANCS.2011.46     Document Type: Conference Paper

References (23)

1. ArcSight ESM - Enterprise Security Manager. URL http://www.arcsight.com/ products/products-esm/.
2. Cisco IOS NetFlow. URL www.cisco.com/web/go/netflow.
3. Lancope netflow, sflow-based security, network, application performance monitoring. URL http://www.lancope.com/.
4. sFlow.org - Making the Network Visible. URL http://www.sflow.org/.
5. Netflow performance analysis. Technical report, Cisco Systems, Inc., 2007.
6. G. Antichi, D. J. Miller, and S. Giordano. An open-source hardware module for high-speed network monitoring on netfpga. In European NetFPGA Developers Workshop, 2010.
7. S. W. Birch. Performance characteristics of a kernel-space packet capture module. Master's thesis, Air Force Institute of Technology, 2010.
8. L. Braun, A. Didebulidze, N. Kammenhuber, and G. Carle. Comparing and improving current packet capturing solutions based on commodity hardware. In Internet Measurement Conference, pages 206-217, 2010.
9. L. Deri. ntop: Netflow, netflow-lite and sflow based open source network traffic monitoring. URL http://www.ntop.org/.
10. L. Deri. Improving passive packet capture: Beyond device polling. In International System Administration and Network Engineering Conference, 2004.
11. L. Deri. PF RING, May 2011. URL http://www.ntop.org/PF-RING.html.
12. C. Fraleigh, S. Moon, B. Lyles, C. Cotton, M. Khan, D. Moll, R. Rockell, T. Seely, and C. Diot. Packet-level traffic measurements from the sprint ip backbone. IEEE Network, 17(6):6-16, 2003.
13. F. Fusco and L. Deri. High speed network traffic analysis with commodity multi-core systems. In Internet Measurement Conference, pages 218-224, 2010.
14. J. Gasparakis and J. Peter P Waskiewicz. Design considerations for efficient network applications with intel multi-core processor-based systems on linux. Technical report, Intel Embedded Design Center, 2010.
15. K. Keys, D. Moore, R. Koga, E. Lagache, M. Tesch, and kc claffy. The architecture of the coralreef internet traffic monitoring software suite. In Passive and Active Network Measurement Workshop, 2001.
16. L. B. N. Laboratory. Bro intrusion detection system. URL http://www.bro-ids.org/.
17. J. Mai, C.-N. Chuah, A. Sridharan, T. Ye, and H. Zang. Is sampled data sufficient for anomaly detection? In Internet Measurement Conference, 2006.
18. S. McCanne and V. Jacobson. The bsd packet filter: A new architecture for user-level packet capture. In USENIX Annual Technical Conference, 1993.
19. R. Olsson. pktgen the linux packet generator. In Ottawa Linux Symposium, 2005.
20. V. Paxson. Bro: A system for detecting network intruders in real-time. In Computer Networks, pages 2435-2463, 1999.
21. V. Sekar, M. K. Reiter, and H. Zhang. Revisiting the case for a minimalist approach for network flow monitoring. In IMC, 2010.
22. A. Turner. Tcpreplay. URL http://tcpreplay.synfin.net/.
23. C. Wiseman, J. Turner, M. Becchi, P. Crowley, J. DeHart, M. Haitjema, S. James, F. Kuhns, J. Lu, J. Parwatikar, R. Patney, M. Wilson, K. Wong, and D. Zar. A remotely accessible network processor-based router for network experimentation. In ANCS, pages 20-29, New York, NY, USA, 2008. ACM.