Stager A Web Based Application for Presenting Network Statistics

Oslebo, A.

doi:10.1109/noms.2006.1687613

Cited by 9 publications

(5 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The open source community has contributed several successful tools for intrusion detection and network monitoring. NfSen [16] and Stager [17] are web frontends that display aggregated information about previously captured netflows. In the backend, they rely on database systems to provide aggregated reports and efficient access to detail records.…”

Section: Network Monitoring and Intrusion Detection Systemsmentioning

confidence: 99%

Visual support for analyzing network traffic and intrusion detection events using TreeMap and graph representations

Mansmann

Fischer

Keim

et al. 2009

Proceedings of the Symposium on Computer Human Interaction for the Management of Information Technology

View full text Add to dashboard Cite

Network security depends heavily on automated Intrusion Detection Systems (IDS) to sense malicious activity. Unfortunately, IDS often deliver both too much raw information, and an incomplete local picture, impeding accurate assessment of emerging threats. We propose a system to support analysis of IDS logs, that visually pivots large sets of Net-Flows. In particular, two visual representations of the flow data are compared: a TreeMap visualization of local network hosts, which are linked through hierarchical edge bundles with the external hosts, and a graph representation using a force-directed layout to visualize the structure of the host communication patterns. Three case studies demonstrate the capabilities of our tool to 1) analyze service usage in a managed network, 2) detect a distributed attack, and 3) investigate hosts in our network that communicate with suspect external IPs.

show abstract

Section: Network Monitoring and Intrusion Detection Systemsmentioning

confidence: 99%

Visual support for analyzing network traffic and intrusion detection events using TreeMap and graph representations

Mansmann

Fischer

Keim

et al. 2009

Proceedings of the Symposium on Computer Human Interaction for the Management of Information Technology

View full text Add to dashboard Cite

show abstract

“…Stager [7] is a system for aggregating and presenting network statistics. It is a generic tool that can be customized to present and process any kind of network statistics.…”

Section: B Stager Descriptionmentioning

confidence: 99%

When AppMon Met Stager

Nikiforakis

Antoniades

Markatos

et al. 2008

NOMS Workshops 2008 - IEEE Network Operations and Management Symposium Workshops

View full text Add to dashboard Cite

Monitoring applications provide an important service in network related activities, such as network monitoring, network management and network software engineering. They facilitate the need of understanding exactly what occurs inside our networks and how each network interacts with the rest of the Internet. From private and local networks, to large-scale corporate networks and intranets, there is an ever-growing need to characterize and analyze network traffic. Unfortunately, network monitoring applications have the side effect of generating huge amounts of real-time data, that need to be processed, stored and presented, in an effective fashion. If this is done correctly and efficiently, network administrators, researchers, as well as users, can extract useful information from them, such as, traffic patterns, newly deployed network protocols, etc.In this paper we present our experiences on the combination of two tools, AppMon and Stager, and the study of the resulting system. AppMon is a network monitoring toolkit which performs per-application traffic classification. Stager is a tool which stores, aggregates and presents long-term network statistics, coming from multiple monitoring sides. We modified, combined, and extended these tools so that real-time data produced by AppMon are transferred, converted and stored through Stager. The resulting system gives access to valuable aggregated long-term network data which were not available through existing tools and methods.

show abstract

“…Existing research on IP network behavior analysis mainly focus on traffic pattern analysis [1][2][3][4][5][6][7][8] , anomaly detection [9][10][11][12] , traffic classification and application protocol identification [13] , user behavior analysis and model building [14 -16] , analysis system building [15][16][17][18][19][20] .…”

Section: Introductionmentioning

confidence: 99%

“…Stager [17] is an open source NetFlow traffic analysis tools, compatible with the SNMP data source, but it does not support TopN analysis, user group analysis , protocol group analysis or user access behavior analysis. Zeng et al [15] classified the network behavior into five kinds: traffic behavior, end-to-end behavior, routing behavior, application behavior and network element equipment behavior.…”

Section: Introductionmentioning

confidence: 99%

Design and implementation of IP network behaviour analysis system based on NetFlow

Hou

Zou

2012

2012 12th International Conference on Intelligent Systems Design and Applications (ISDA)

View full text Add to dashboard Cite

The high-speed development of the Internet has brought up a huge challenge for network management. Larger network traffic and more complex applications make it difficult for the original SNMP-based network management software to meet demands of analyzing users and protocols; widespread utility of dynamic ports greatly reduces the accuracy of distinguishing application layer protocols based on tranditional static ports. Since raw NetFlow is enormous, unfit for long-term storage and low in query efficiency, multiple time granularity aggregation schemes are designed. This paper describes characteristics of both real-time and history traffic from five aspects, thus providing a clearer view of network operating conditions. Besides, as the indicator of users' web access behavior, web sites and URLs are analyzed.

show abstract

Stager A Web Based Application for Presenting Network Statistics

Cited by 9 publications

References 0 publications

Visual support for analyzing network traffic and intrusion detection events using TreeMap and graph representations

Visual support for analyzing network traffic and intrusion detection events using TreeMap and graph representations

When AppMon Met Stager

Design and implementation of IP network behaviour analysis system based on NetFlow

Contact Info

Product

Resources

About