Design and performance of the OpenBSD stateful packet filter (PF)

Proceedings of the 2002 USENIX Annual Technical Conference

Volumn , Issue , 2002, Pages

  Hartmeier, Daniel ^a  

^a Systor AG   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

CONNECTED NETWORKS; DESIGN AND IMPLEMENTATIONS; INFORMED DECISION; NETWORK FILTERING; NETWORK PACKETS; NOVEL ALGORITHM; PACKET FILTERING; SCALABILITY AND PERFORMANCE;

COMPUTER SYSTEM FIREWALLS;

EID: 85084164821     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (8)

1. S. Bradner and J. McQuaid. Benchmarking methodology for network interconnect devices. Internet RFC 2544, March 1999.
2. David Watson Farnam Jahanian, G. Robert Malan and Paul Howell. Transport and application protocol scrubbing. In Proc. Infocomm 2000, 2000.
3. Patricia Gilfeather and Todd Underwood. Fragmentation made friendly. In http://www.cs.unm.edu/∼maccabe/SSL/frag/FragPaper1/Fragmentation.html.
4. C. A. Kent and J. C. Mogul. Fragmentation considered harmful. In WRL Technical Report 87/3, December 1987.
5. C. Kreibich M. Handley and V. Paxson. Network intrusion detection: Evasion, traffic normalization, and end-to-end protocol semantics. In Proc. USENIX Security Symposium 2001, 2001.
6. Steven McCanne and Van Jacobson. The bsd packet filter: A new architecture for user-level packet capture. In Proc. 1993 Winter USENIX Conference, San Diego, CA, January 1993.
7. The OpenBSD project. http://www.openbsd.org/.
8. Guido van Rooij. Real stateful tcp packet filtering in ip filter. In http://www.madisongurkha.com/publications/tcp filtering/tcp filtering.ps, 2000.