A Passive Network Appliance for Real-Time Network Monitoring

Schultz, Michael J.; Wun, Ben; Crowley, Patrick

doi:10.1109/ancs.2011.46

Cited by 4 publications

(4 citation statements)

References 8 publications

(12 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As stated by Voicu et al [36], network monitoring is a resourceintensive task in many cases. Since the XML and MSC models are created automatically, the high monitoring costs stated by Kuwabara et al [34] and Schultz et al [35] can be reduced.…”

Section: A Evaluation Of the Process And The Toolmentioning

confidence: 99%

“…Network monitoring is a procedure that can be used to monitor current traffic conditions [32], to monitor multimedia applications [33], to ensure quality of service [34], and to provide a comprehensive view of the networks for administrators [35]. Network monitoring is a resource-intensive procedure [36].…”

Section: Introductionmentioning

confidence: 99%

“…Network monitoring is a resource-intensive procedure [36]. Therefore, the costs of network monitoring may become high [34], [35].…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Automatic Model Creation to Support Network Monitoring

Maatta

Räty

2014

IEEE Access

View full text Add to dashboard Cite

The large variety of network traffic sets many challenges in modeling the essential aspects of network traffic flows. Analyzing and collecting features for the model creation process from the network traffic traces is a time-consuming and error-prone task. Automating these procedures are a challenge. The research problem discussed in this paper concentrates on the analysis and collection of features from the network traffic traces for the model development process, by automating the analysis and collection. The proposed system of this paper, called MGtoolV2, supports the model development process through the automation of collection and analysis in the actual model creation procedures. The model development process aims to enhance the development of a model by reducing the development cost and time. The proposed tool automatically creates large sets of models according to the network traffic traces and minimizes the errors of manual modeling. The experiments conducted with MGtoolV2 indicate that the tool is able to create the models from the traffic traces cost effectively. MGtoolV2 is able to unify similarities between packets, to create very detailed models describing specific information, and to raise the abstraction level of the created models. The research is based on the constructive method of the related publications and technologies, and the results are established from the testing, validation, and analysis of the implemented MGtoolV2.

show abstract

Section: A Evaluation Of the Process And The Toolmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Automatic Model Creation to Support Network Monitoring

Maatta

Räty

2014

IEEE Access

View full text Add to dashboard Cite

show abstract

“…As such, we have selected a kernel-space based packet processing method and two user-space packet processing methods. For the kernel-space packet processor we are using the Passive Network Appliance (PNA) [25]. The PNA has been previously developed by the authors to facilitate fast processing of packets on commodity hardware and has been proven to handle a constant load of about 1 Gbps in an operation setting.…”

Section: Packet Processing Methodsmentioning

confidence: 99%

Performance Analysis of Packet Capture Methods in a 10 Gbps Virtualized Environment

Schultz

Crowley

2012

2012 21st International Conference on Computer Communications and Networks (ICCCN)

Self Cite

View full text Add to dashboard Cite

Abstract-Network speeds are increasing and processor core counts rise while processor clock rates stagnate. This has led to both packet processing applications distributing their workload over several cores and virtualization of physical systems also using multiple cores. However, these two concepts are at odds with each other as both must take full advantage of multi-core systems for desirable performance.In this paper, we look at the performance considerations of dealing with 10 Gbps traffic rates in worst case loads using a bare-metal system and a virtual appliance model and several difference packet capture methods. We also discuss potential ideas to improve the performance of these virtual systems.

show abstract

k-p0f: A high-throughput kernel passive OS fingerprinter

Barnes¹,

Crowley²

2013

Architectures for Networking and Communications Systems

View full text Add to dashboard Cite

A Passive Network Appliance for Real-Time Network Monitoring

Cited by 4 publications

References 8 publications

Automatic Model Creation to Support Network Monitoring

Automatic Model Creation to Support Network Monitoring

Performance Analysis of Packet Capture Methods in a 10 Gbps Virtualized Environment

k-p0f: A high-throughput kernel passive OS fingerprinter

Contact Info

Product

Resources

About