workload characterization (passive monitoring)

• uses: research, equipment design, operational (engineering/security/policing), & accounting

• router-based implementations, e.g., cflowd, netflow

• stand-alone monitors, e.g., CoralReef (OC3, 12, 48)

  • persistent real-time full frame collection
  • security: dynamic pkt filtering trigger by attack precursors
  • Dag 4.1 (OC48 POS) testing planned 6/00

• NLANR MOAT - 15 monitors collecting traces (http://moat.nlanr.net/pma)

Previous slide

Next slide

Back to first slide

View graphic version