workload characterization: coralreef crl_filter ATM reassembly tcpdump output format pipes to security tools future OC12 (full line rates), OC48 need card support [obviously way (& getting further) behind switching...] active enforcement module (yr 2000) getting ISPs to use them www.caida.org/Tools/CoralReef