Ourmon and network monitoring performance

USENIX 2005 Annual Technical Conference

Volumn , Issue , 2005, Pages 95-108

  Binkley, James R ^a   Massey, Bart ^a  

^a Portland State University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; HIGH SPEED NETWORKS; MONITORING; OPEN SYSTEMS;

ANOMALY DETECTION SYSTEMS; BERKELEY PACKET FILTERS; COMMERCIAL SYSTEMS; CURRENT MONITORING SYSTEMS; MONITORING AND ANALYSIS; OPEN SOURCE SYSTEM; OPEN-SOURCE NETWORK; PERFORMANCE CHARACTERISTICS;

NETWORK SECURITY;

EID: 84966610077     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. Cisco Systems. Cisco CNS NetFlow Collection Engine. http://www.cisco.com/en/US/products/sw/netmgtsw/ps1964/products_user_guide_chapter09186a00801ed569.html, April 2004.
2. M. Adiletta, M. Rosenbluth, D. Bernstein, G. Worich, and H. Wilkinson. The Next Generation of Intel IXP Network Processors. Intel Technology Journal, August 2002.
3. A. Begel, S. McCanne, S. Graham. BPF+: Exploiting Global Data-flow Optimization in a Generalized Packet Filter Architecture. Proceedings of ACM SIGCOMM. September 1999.
4. CERT Advisory CA-2003-04 MS-SQL Server Worm. http://www.cert.org/advisories/CA-2003-04.html, November 2003.
5. L. Deri and S. Suin. Practical Network Security: Experiences with ntop, IEEE Communications Magazine, May 2000.
6. S. Ioannidis, K. Anagnostakis, J. Ioannidis, and A. D. Keromytis. xPF: Packet Filtering for Low-Cost Network Monitoring. In Proceedings of the IEEE Workshop on High-Performance Switching and Routing (MPSR), May 2002.
7. Karlin, Scott, Peterson, Larry, Maximum Packet Rates for Full-Duplex Ethernet, Technical Report TR-645-02, Department of Computer Science, Princeton University, Feb. 2002.
8. C. Kruegel, F. Valeur, G Vignka, R. Kemmerer. Stateful Intrusion Detection in High-Speed Networks. In Proceedings IEEE Symposium Security and Privacy, IEEE Computer Society Press, Calif. 2002.
9. Leffler, et. al., The Design and Implementation of the 4.3BSD Unix Operating System, Addison-Wesley, 1989
10. S. McCanne and V. Jacobson. The BSD Packet Filter: A New Architecture for User-level Packet Capture. In Proceedings of the Winter 1993 USENIX Conference, San Diego, January 1993.
11. J.C. Mogul and K.K. Ramakrishnan. Eliminating Receive Livelock in an Interrupt-Driven Kernel. In ACM Transactions on Computer Systems, 15(3):217-252, August 1997.
12. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, N. Weaver. The Spread of the Sapphire/Slammer Worm. http://www.cs.berkeley.edu/~nweaver/sapphire. 2003.
13. NEye, an Open Source Netflow Collector. http://neye.unsupported.info. February 2005.
14. Ntop distribution page. http://sourceforge.net/projects/ntop. March 2004.
15. Ourmon web page. http://ourmon.cat.pdx.edu/ourmon, March 2004.
16. M. Roesch. Snort—Lightweight Intrusion Detection for Networks. In Proceedings of the USENIX LISA’99 Conference, November 1999.
17. RRDTOOL web page. http://people.ee.ethz.ch/~oetiker/webtools/rrdtool. March 2004.
18. B. Schneier. Secrets and Lies. p. xii. Wiley Computer Publishing. 2000.
19. Tcpdump/libpcap home page. http://www.tcpdump.org, March 2004.
20. Cricket home page. http://cricket.sourceforge.net, March 2004.
21. J. Allen. Driving by the Rear-View Mirror: Managing a Network with Cricket. In Proceedings of the USENIX First Conference on Network Administration’99 Conference, April 1999.
22. Waldbusser, S. Remote Network Monitoring Management Information Base Version 2. IETF. RFC 2021, January 1997.