nCap: wire-speed packet capture and transmission

Authors:
L. Deri
Affiliations:
NTOP, Pisa, Italy
Venue:
E2EMON '05 Proceedings of the End-to-End Monitoring Techniques and Services on 2005. Workshop
Year:
2005

Citing 0
Cited 17

High-Speed Dynamic Packet Filtering

Journal of Network and Systems Management
Frame shared memory: line-rate networking on commodity hardware

Proceedings of the 3rd ACM/IEEE Symposium on Architecture for networking and communications systems
Performance evaluation comparison of Snort NIDS under Linux and Windows Server

Journal of Network and Computer Applications
Packet capture in 10-gigabit Ethernet environments using contemporary commodity hardware

PAM'07 Proceedings of the 8th international conference on Passive and active network measurement
Characterizing user-level network virtualization: performance, overheads and limits

International Journal of Network Management
Optimizing performance of packet capture in virtual containers of OpenVZ

SpringSim '10 Proceedings of the 2010 Spring Simulation Multiconference
Comparing and improving current packet capturing solutions based on commodity hardware

IMC '10 Proceedings of the 10th ACM SIGCOMM conference on Internet measurement
High speed network traffic analysis with commodity multi-core systems

IMC '10 Proceedings of the 10th ACM SIGCOMM conference on Internet measurement
SPAF: stateless FSA-based packet filters

IEEE/ACM Transactions on Networking (TON)
Application level measurement

Network performance engineering
vPF_RING: towards wire-speed network monitoring using virtual machines

Proceedings of the 2011 ACM SIGCOMM conference on Internet measurement conference
Improving the performance of passive network monitoring applications with memory locality enhancements

Computer Communications
A high-performance and scalable multi-core aware software solution for network monitoring

The Journal of Supercomputing
On multi---gigabit packet capturing with multi---core commodity hardware

PAM'12 Proceedings of the 13th international conference on Passive and Active Measurement
Netmap: a novel framework for fast packet I/O

USENIX ATC'12 Proceedings of the 2012 USENIX conference on Annual Technical Conference
Deep packet inspection tools and techniques in commodity platforms: Challenges and trends

Journal of Network and Computer Applications
Network interface design for low latency request-response protocols

USENIX ATC'13 Proceedings of the 2013 USENIX conference on Annual Technical Conference

Quantified Score

Hi-index	0.00

Visualization

Abstract

With the increasing network speed, it is no longer possible to capture and transmit network packets at wire-speed using general-purpose operating systems. Many companies tried to tackle this problem by manufacturing costly network adapters able to keep up at high network speeds. This paper describes a new approach to wire-speed packet capture and transmission named nCap based on commercial network adapters rather than on custom network adapters and software.