Multi-granular, multi-purpose and multi-Gb/s monitoring on off-the-shelf systems

International Journal of Network Management

Volumn 24, Issue 4, 2014, Pages 221-234

  Moreno, Victor ^a   Santiago Del Río, Pedro M ^a   Ramos, Javier ^a   Muelas, David ^a   García Dorado, José Luis ^a   Gomez Arribas, Francisco J ^a   Aracil, Javier ^a  

^a UNIVERSIDAD AUTÓNOMA DE MADRID   (Spain)

Author keywords

[No Author keywords available]

Indexed keywords

HARDWARE; INTRUSION DETECTION; OPEN SOURCE SOFTWARE;

COMMODITY HARDWARE; DIFFERENT GRANULARITIES; INTERMEDIATE LAYERS; MONITORING APPLICATIONS; OFF-THE-SHELF SYSTEMS; OPEN-SOURCE SOFTWARES; SYSTEM ARCHITECTURES; TRAFFIC AGGREGATES;

AGGREGATES;

EID: 84904196547     PISSN: 10557148     EISSN: 10991190     Source Type: Journal    
DOI: 10.1002/nem.1861     Document Type: Article

References (24)

1. García-Dorado JL, Finamore A, Mellia M, Meo M, Munafò M,. Characterization of ISP traffic: trends, user habits, and access technology impact, IEEE Transactions on Network and Service Management 2012; 9 (2): 142-155.
2. Braun L, Didebulidze A, Kammenhuber N, Carle G,. Comparing and improving current packet capturing solutions based on commodity hardware, In Proceedings of ACM Internet Measurement Conference, Melbourne, Australia, 2010; 206-217.
3. Li B, Springer J, Bebis G, Gunes MH,. A survey of network flow applications, Journal of Network and Computer Applications 2013; 36 (2): 567-581.
4. Cisco Systems, Cisco network convergence system, 2013. Available: http://www.cisco.com/en/US/products/ps13132/index.html [15 March 2014].
5. García-Dorado JL, Mata F, Ramos J, Santiago del Río PM, Moreno V, Aracil J,. High-performance network traffic processing systems using commodity hardware. In Data Traffic Monitoring and Analysis Springer: Berlin, 2013, pp. 3-27.
6. naudit. Detect-Pro, 2013. Available: http://www.naudit.es/index.php?s= 3&p=5&l=1 [15 March 2014].
7. High Performance Computing and Networking Group: Universidad Autnoma de Madrid (HPCN-UAM). HPCAP and M 3 Omon, 2013. Available: https://github.com/hpcn- uam/ [15 March 2014].
8. Moreno V,. Available: http://www.ii.uam.es/~vmoreno/Publications/ morenoTFM2012.pdf [15 March 2014], Master's Thesis, Universidad Autõnoma de Madrid, 2012.
9. Fusco F, Deri L,. High speed network traffic analysis with commodity multi-core systems, In Proceedings of ACM Internet Measurement Conference, Melbourne, Australia, 2010; 218-224.
10. Rizzo L,. Revisiting network I/O APIs: the netmap framework, Communications of the ACM 2012; 55 (3): 45-51.
11. Han S, Jang K, Park K, Moon S,. PacketShader: a GPU-accelerated software router, SIGCOMM Computer Communication Review 2010; 40 (4): 19-206.
12. Moreno V, Santiago del Río PM, Ramos J, Garnica JJ, García-Dorado JL,. Batch to the future: analyzing timestamp accuracy of high-performance packet I/O engines, IEEE Communications Letters 2012; 16 (11): 1888-1891.
13. Walsworth C, Aben E, Claffy KC, Andersen D,. The CAIDA anonymized 2009 and Internet traces, 2012. Available: http://www.caida.org/data/passive/passive- 2009-dataset.xml; http://www.caida.org/data/passive/passive-2012-dataset.xml [15 March 2014].
14. Mata F, García-Dorado JL, Aracil J,. Detection of traffic changes in large-scale backbone networks: the case of the Spanish academic network, Computer Networks 2012; 56 (2): 686-702.
15. Bonelli N, Di Pietro A, Giordano S, Procissi G,. On multi-gigabit packet capturing with multi-core commodity hardware, In Proceedings of Conference on Passive and Active Network Measurement, Vienna, Austria, 2012; 64-73.
16. Intel. Intel Data Plane Development Kit (Intel DPDK), 2014. Available: http://www.intel.com/content/dam/www/public/us/en/documents/release-notes/ intel-dpdk-release-notes.pdf [15 March 2014].
17. Finamore A, Mellia M, Meo M, Munafò MM, Rossi D,. Experiences of Internet traffic monitoring with Tstat, IEEE Network 2011; 25 (3): 8-14.
18. Maier G, Sommer R, Dreger H, Feldmann A, Paxson V, Schneider F,. Enriching network security analysis with time travel, In ACM SIGCOMM, Seattle, Washington, USA, 2008; 183-194.
19. Čeleda P, Krejčí R, Barienčík J, Elich M, Krmíček V,. HAMOC hardware-accelerated monitoring center. 9/2010, CESNET. Available: http://archiv.cesnet.cz/doc/techzpravy/2010/hamoc/ [15 March 2014].
20. di Pietro A, Huici F, Bonelli N, Trammell B, Kastovsky P, Groleat T, Vaton S, Dusi M,. Toward composable network traffic measurement, In Proceedings of IEEE INFOCOM, Turin, Italy, 2013; 70-74.
21. Gringoli F, Este A, Salgarelli L,. MTCLASS: Traffic classification on high-speed links with commodity hardware, In Proceedings of IEEE Conference on Communications, Ottawa, Canada, 2012; 1177-1182.
22. Santiago del Rio PM, Rossi D, Gringoli F, Nava L, Salgarelli L, Aracil J,. Wire-speed statistical classification of network traffic on commodity hardware, In Proceedings of ACM Internet Measurement Conference, Boston, Massachusets, USA, 2012; 65-72.
23. Jamshed M, Lee J, Moon S, Yun I, Kim D, Lee S, Yi Y, Park KS,. Kargus: a highly-scalable software-based intrusion detection system, In Proceedings of ACM Conference on Computer and Communications Security, Raleigh, North Carolina, USA, 2012; 317-328.
24. Vasiliadis G, Polychronakis M, Ioannidis S,. MIDeA: a multi-parallel intrusion detection architecture, In Proceedings of ACM Conference on Computer and Communications Security, Chicago, Illinois, USA, 2011; 297-308.