11

Light-weight, Low-cost Security Monitors for High-performance Networks OC3mon and OC12mon Coral Monitors

---

Low-cost, PC-based ATM traffic capture devices, https://www.caida.org/tools/measurement/coralreef/
• OC3 and OC12 speeds (full duplex)
• extracts fraction of light from trunk (w/hardware splitters)
• firmware modified to capture first cell per frame

OC3mon extensively deployed on Internet and vBNS.

Initial application -- traffic metrics.