Building a time machine for efficient recording and retrieval of high-volume network traffic

Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC

Volumn , Issue , 2005, Pages 267-272

  Kornexl, Stefan ^a   Paxson, Vern ^b   Dreger, Holger ^a   Feldmann, Anja ^a   Sommer, Robin ^a  

^a TECHNICAL UNIVERSITY OF MUNICH   (Germany)

^b LAWRENCE BERKELEY NATIONAL LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMMODITY HARDWARE; DESIGN AND IMPLEMENTATIONS; HEAVY-TAILED; HIGH VOLUMES; NETWORK TRAFFIC; PRODUCTION ENVIRONMENTS; TIME MACHINE;

MEASUREMENTS;

EID: 84878718671     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (7)

1. ANTONELLI, C., UNDY, M., AND HONEYMAN, P. The Packet Vault: Secure Storage of Network Data. In Proc. Workshop on Intrusion Detection and Network Monitoring (April 1999), pp. 103-110.
2. LAWRENCE BERKELEY NATIONAL LABORATORY. tcpdump and libpcap. http://www.tcpdump.org/.
3. MCAFEE. McAfee Security Forensics. http://www.mcafeesecurity.com/us/ products/mcafee/forensics/security-for%ensics.htm.
4. MCCANNE, S., AND JACOBSON, V. The BSD Packet Filter: A New Architecture for User-level Packet Capture. In Proc. USENIX Winter 1993 Conference (January 1993), pp. 259-270.
5. PAXSON, V. Bro: A system for detecting network intruders in real-time. Computer Networks 31, 23-24 (December 1999).
6. PAXSON, V., AND FLOYD, S. Wide-Area Traffic: The Failure of Poisson Modeling. IEEE/ACM Transactions on Networking 3, 3 (June 1995), 226-224.
7. WALLERICH, J., DREGER, H., FELDMANN, A., KRISHNAMURTHY, B., AND WILLINGER, W. A Methodology for Studying Persistency Aspects of Internet Flows. ACM SIGCOMM Computer Communication Review 35, 2 (April 2005), 23-36.