Implementation of a Stream-Based IP Flow Record Query Language
Résumé
Internet traffic analysis via flow records is an important task for network operators. There is a variety of applications, targeted at identifying, filtering or aggregating flows based on certain criteria. Most of these applications exhibit certain limitations when it comes to the identification of complex network activities. To overcome some of these limitations, a new flow query language has been proposed recently, which allows to express complex time relationships between flows. In this paper, we describe a prototype implementation of this query language and we evaluate its performance.
Domaines
Bibliothèque électronique [cs.DL]Origine | Fichiers produits par l'(les) auteur(s) |
---|
Loading...