NDLI: The Netnice packet filter: bridging the structural mismatches in end-host network control

Content Provider	IEEE Xplore Digital Library
Author	Okumura, T. Mosse, D.
Copyright Year	2005
Description	Author affiliation: Dept. of Comput. Sci., Pittsburgh Univ., PA, USA (Okumura, T.; Mosse, D.)
Abstract	There have been increasing demands for proper monitoring and control in end-host systems, mainly for security and QoS purposes. Nevertheless, existing technologies are insufficient as primitives for end-host security. For example, Berkeley packet filter (BPF), the most popular monitoring infrastructure for many Unix systems, is intended for packet capturing at physical interfaces, and thus, not appropriate for monitoring of applications, which is sometimes critical for system security. This paper presents a simple solution to the problem, utilizing hierarchical virtual network interface (VIF) mechanism. VIF is a new OS abstraction that can be hierarchically structured and attached to OS entities to control their network I/O. We extend VIFs to allow filtering and monitoring of their traffic, and show that it has desirable properties for end-host monitoring and control of traffic. We present our prototype implementation on FreeBSD, and evaluate it qualitatively and quantitatively. Demonstrated advantages include: i) ability to monitor terminating entities at arbitrary granularity, ii) a single consistent framework for both network security and network quality of service, iii) OS independence, iv) efficiency as a control primitive, v) compatibility with BPF interface and its applications, and vi) flexibility for future functional expansion.
Starting Page	2091
Ending Page	2101
File Size	2419158
Page Count	11
File Format	PDF
ISBN	0780389689
ISSN	0743166X
DOI	10.1109/INFCOM.2005.1498485
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2005-03-13
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Intelligent networks Communication system traffic control Traffic control Band pass filters Peace technology Control systems Computerized monitoring Quality of service Application software Inspection
Content Type	Text
Resource Type	Article
Subject	Computer Science Electrical and Electronic Engineering

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Netnice packet filter - bridging the structural mismatches in end-host network control and monitoring (2005)

Rate-based end-to-end congestion control of multimedia traffic in packet switched networks

A framework of designing a Packet Filter for Low Cost Network Monitoring

Network Traffic Analysis and Intrusion Detection Using Packet Sniffer

Intelligent control in traffic management

A Low Pass Filter Traffic Shaping Mechanism for the Arrival of Traffic

Per flow packet sampling for high-speed network monitoring

Network QoS management framework for server clusters an end-host retrofitting event-handler approach using netnice

Impact of WSN applications’ generated traffic on WCDMA access networks

The Netnice packet filter: bridging the structural mismatches in end-host network control

Similar Documents

Netnice packet filter - bridging the structural mismatches in end-host network control and monitoring (2005)

Rate-based end-to-end congestion control of multimedia traffic in packet switched networks

A framework of designing a Packet Filter for Low Cost Network Monitoring

Network Traffic Analysis and Intrusion Detection Using Packet Sniffer

Intelligent control in traffic management

A Low Pass Filter Traffic Shaping Mechanism for the Arrival of Traffic

Per flow packet sampling for high-speed network monitoring

Network QoS management framework for server clusters an end-host retrofitting event-handler approach using netnice

Impact of WSN applications’ generated traffic on WCDMA access networks

The Netnice packet filter: bridging the structural mismatches in end-host network control