Light-weight, Low-cost Security Monitors for High-performance Networks
Integration of Packet Filtering w/Coral Monitors
Most traffic is ``uninteresting'', but what is, want to
- collect more (full frames)
- keep more
Need to integrate low-level, high-performance, real-time packet filtering.
Employ subset of the BSD Packet Filter language.
Evaluate performance of firmware-based filtering and on-host
software-based filtering.
