{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,31]],"date-time":"2026-01-31T02:29:33Z","timestamp":1769826573110,"version":"3.49.0"},"reference-count":54,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"10","license":[{"start":{"date-parts":[[2014,10,1]],"date-time":"2014-10-01T00:00:00Z","timestamp":1412121600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"name":"Prevention of and Fight against Crime Programme of the European Commission\u2014Directorate-General Home Affairs (project GCC)"},{"name":"FP7 project SysSec"},{"name":"FP7-PEOPLE-2009-IOF project MALCODE"},{"DOI":"10.13039\/501100000780","name":"European Commission","doi-asserted-by":"publisher","award":["254116"],"award-info":[{"award-number":["254116"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000780","name":"European Commission","doi-asserted-by":"publisher","award":["257007"],"award-info":[{"award-number":["257007"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE J. Select. Areas Commun."],"published-print":{"date-parts":[[2014,10]]},"DOI":"10.1109\/jsac.2014.2358831","type":"journal-article","created":{"date-parts":[[2014,9,17]],"date-time":"2014-09-17T18:56:24Z","timestamp":1410980184000},"page":"1849-1863","source":"Crossref","is-referenced-by-count":10,"title":["Stream-Oriented Network Traffic Capture and Analysis for High-Speed Networks"],"prefix":"10.1109","volume":"32","author":[{"given":"Antonis","family":"Papadogiannakis","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michalis","family":"Polychronakis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Evangelos P.","family":"Markatos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","first-page":"1","article-title":"YAF: Yet another flowmeter","author":"inacio","year":"0","journal-title":"Proc Usenix LISA Conf"},{"key":"ref38","year":"0","journal-title":"10 G-PCIE-8B-S Single-Port 10-Gigabit Ethernet Network Adapters"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/505696.505704"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2011.08.003"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629578"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2168836.2168870"},{"key":"ref37","year":"0","journal-title":"T4 Unified Wire Adapters"},{"key":"ref36","year":"0","journal-title":"SMC10GPCIe-XFP Tiger Card 10 G PCIe 10 GbE XFP Server Adapter"},{"key":"ref35","year":"0","journal-title":"10 GbE LOM\/Controller Family"},{"key":"ref34","author":"woo","year":"2012","journal-title":"Scalable TCP session monitoring with symmetric receive-side scaling"},{"key":"ref28","first-page":"252","article-title":"Performance adaptation in real-time intrusion detection systems","author":"lee","year":"0","journal-title":"Proc RAID Int Symp"},{"key":"ref27","first-page":"2","article-title":"Operational experiences with high-volume network intrusion detection","author":"dreger","year":"0","journal-title":"Proc ACM Conf CCS"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.27"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"ref1","first-page":"229","article-title":"Snort: Lightweight intrusion detection for networks","author":"roesch","year":"0","journal-title":"Proc Usenix LISA Conf"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2012.6178843"},{"key":"ref22","first-page":"89","article-title":"Backtracking algorithmic complexity attacks against a NIDS","author":"smith","year":"0","journal-title":"Proc ACSAC"},{"key":"ref21","first-page":"1","article-title":"Tolerating overload attacks against packet capturing systems","author":"papadogiannakis","year":"0","journal-title":"Proc USENIX ATC"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504750"},{"key":"ref23","year":"0","journal-title":"Receive side scaling on Intel Network Adapters"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-7753-3_5"},{"key":"ref25","year":"0","journal-title":"82599 10 GbE Controller Datasheet"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/HPSR.2002.1024219"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2002.1015599"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2006.1687568"},{"key":"ref53","first-page":"59","article-title":"Load shedding in network monitoring applications","author":"barlet-ros","year":"0","journal-title":"Proc USENIX ATC"},{"key":"ref52","author":"novak","year":"2007","journal-title":"Target Based Tcp Stream Reassembly"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2011.092311.00082"},{"key":"ref11","first-page":"85","article-title":"Improving passive packet capture: Beyond device polling","author":"deri","year":"0","journal-title":"Proc Int SANE Conf"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/360825.360855"},{"key":"ref12","first-page":"259","article-title":"The BSD packet filter: A new architecture for user-level packet capture","author":"mccanne","year":"0","journal-title":"Proc Winter Usenix Conf"},{"key":"ref13","author":"mccanne","year":"0","journal-title":"libpcap"},{"key":"ref14","year":"0","journal-title":"Libnids"},{"key":"ref15","first-page":"327","article-title":"Detecting evasion attacks at high speeds without reassembly","author":"varghese","year":"0","journal-title":"Proc ACM SIGCOMM Conf Data Commun"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS.2009.4808888"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402980"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2011.5928926"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1752046.1752049"},{"key":"ref4","first-page":"45","article-title":"Automated worm fingerprinting","author":"singh","year":"0","journal-title":"Proc USENIX OSDI Symp"},{"key":"ref3","first-page":"167","article-title":"BotHunter: Detecting malware infection through IDS-driven dialog correlation","author":"gu","year":"0","journal-title":"Proc Usenix Security Symp"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028804"},{"key":"ref5","year":"0","journal-title":"Application Layer Packet Classifier for Linux (L7-filter)"},{"key":"ref8","first-page":"1","article-title":"Network intrusion detection: Evasion, traffic normalization, and end-to-end protocol semantics","author":"handley","year":"0","journal-title":"Proc Usenix Security Symp"},{"key":"ref7","first-page":"65","article-title":"Robust TCP stream reassembly in the presence of adversaries","author":"dharmapurikar","year":"0","journal-title":"Proc Usenix Security Symp"},{"key":"ref49","first-page":"279","article-title":"Swift: A fast dynamic packet filter","author":"wu","year":"0","journal-title":"Proc 1st USENIX Symp NSDI'"},{"key":"ref9","author":"ptacek","year":"1998","journal-title":"Insertion evasion and denial of service Eluding network intrusion detection"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.1422"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879169"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/505672.505678"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-007-9070-0"},{"key":"ref42","first-page":"347","article-title":"FFPF: Fairly fast packet filters","author":"bos","year":"0","journal-title":"Proc USENIX OSDI Symp"},{"key":"ref41","year":"0","journal-title":"Sourcefire Vulnerability Research Team (vrt)"},{"key":"ref44","first-page":"1","article-title":"Netmap: A novel framework for fast packet I\/O","author":"rizzo","year":"0","journal-title":"Proc USENIX ATC"},{"key":"ref43","year":"2010","journal-title":"Myricom Sniffer10G"}],"container-title":["IEEE Journal on Selected Areas in Communications"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/49\/6969128\/06901242.pdf?arnumber=6901242","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T15:59:20Z","timestamp":1642003160000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6901242\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,10]]},"references-count":54,"journal-issue":{"issue":"10"},"URL":"https:\/\/doi.org\/10.1109\/jsac.2014.2358831","relation":{},"ISSN":["0733-8716"],"issn-type":[{"value":"0733-8716","type":"print"}],"subject":[],"published":{"date-parts":[[2014,10]]}}}