{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T14:30:51Z","timestamp":1740148251456,"version":"3.37.3"},"reference-count":49,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2017,3,1]],"date-time":"2017-03-01T00:00:00Z","timestamp":1488326400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"name":"Flamingo, a Network of Excellence Project","award":["ICT-318488"],"award-info":[{"award-number":["ICT-318488"]}]},{"DOI":"10.13039\/501100000780","name":"European Commission under Its Seventh Framework Programme","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Serv. Manage."],"published-print":{"date-parts":[[2017,3]]},"DOI":"10.1109\/tnsm.2016.2633511","type":"journal-article","created":{"date-parts":[[2016,12,1]],"date-time":"2016-12-01T21:33:44Z","timestamp":1480628024000},"page":"8-21","source":"Crossref","is-referenced-by-count":6,"title":["Network Flow Query Language\u2014Design, Implementation, Performance, and Applications"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4089-1090","authenticated-orcid":false,"given":"Vaibhav","family":"Bajpai","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jurgen","family":"Schonwalder","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5655"},{"journal-title":"Json-c-JSON Implementation in C","year":"2016","key":"ref38"},{"key":"ref33","first-page":"305","article-title":"FlowScan: A network traffic flow reporting and visualization tool","author":"plonka","year":"2000","journal-title":"Proc Conf Syst Admin (LISA)"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330137"},{"key":"ref31","first-page":"133","article-title":"The CoralReef software suite as a tool for system and network administrators","author":"moore","year":"2001","journal-title":"Proc Conf Syst Admin (LISA)"},{"key":"ref30","first-page":"259","article-title":"The BSD packet filter: A new architecture for user-level packet capture","author":"mccanne","year":"1993","journal-title":"Proc USENIX Winter Tech Conf"},{"article-title":"The JavaScript object notation (JSON) data interchange format","year":"2014","author":"bray","key":"ref37"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5103"},{"key":"ref35","first-page":"1","article-title":"Stager a Web based application for presenting network statistics","author":"\u00f8sleb\u00f8","year":"2006","journal-title":"Proc IEEE\/IFIP Netw Oper Manage Symp (NOMS)"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/35.841838"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/872757.872838"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/543614.543615"},{"key":"ref29","first-page":"2","article-title":"Tribeca: A system for managing large databases of network traffic","author":"sullivan","year":"1998","journal-title":"Proc USENIX Annu Tech Conf"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080119"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080112"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70587-1_20"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-13986-4_21"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04989-7_2"},{"key":"ref24","first-page":"643","article-title":"NFQL: A tool for querying network flow records","author":"bajpai","year":"2013","journal-title":"Proc IFIP\/IEEE Int Symp Integr Netw Manage"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/INM.2011.5990668"},{"key":"ref26","first-page":"285","article-title":"Combining Cisco NetFlow exports with relational database technology for usage statistics, intrusion detection, and network forensics","author":"nickless","year":"2000","journal-title":"Proc Conf Syst Admin (LISA)"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7012"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2009.090304"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2010.032210.00054"},{"journal-title":"Libfixbuf—An Implementation of the IPFIX Protocol as a C Library for Building IPFIX Collecting and Exporting Processes","year":"2016","key":"ref40"},{"journal-title":"Flow-Tools–A Set of Programs for Processing and Managing NetFlow Exports From Cisco and Juniper Routers","year":"2016","key":"ref12"},{"key":"ref13","first-page":"291","article-title":"The OSU flow-tools package and CISCO NetFlow logs","author":"romig","year":"2000","journal-title":"Proc Conf Syst Admin (LISA)"},{"journal-title":"nfdump—A Tool to Collect and Process NetFlow Data on the Command Line","year":"2016","key":"ref14"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2321898"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.Congress.2014.34"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5470"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/182.358434"},{"journal-title":"NFQL - A C Implementation of the Network Flow Query Language","year":"2016","key":"ref19"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879184"},{"key":"ref3","first-page":"599","article-title":"A flow-based method for abnormal network traffic detection","author":"kim","year":"2004","journal-title":"Proc IEEE\/IFIP Netw Oper Manage Symp (NOMS)"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3954"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3917"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2011.5741152"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7011"},{"key":"ref49","first-page":"1021","article-title":"Practical experience with IPFIX flow collectors","author":"velan","year":"2013","journal-title":"Proc IFIP\/IEEE Int Symp Integr Netw Manage"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5472"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2006.312"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/800230.806987"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2677046.2677050"},{"article-title":"NAT port mapping protocol (NATPMP)","year":"2013","author":"cheshire","key":"ref47"},{"journal-title":"Lempel-Ziv-Oberhumer (LZO)—A Lossless Data Compression Algorithm","year":"2016","key":"ref42"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.17487\/rfc1950"},{"journal-title":"SimpleWeb-Traces","year":"2016","key":"ref44"},{"journal-title":"IP Flow Information Export (IPFIX) Entities","year":"2016","key":"ref43"}],"container-title":["IEEE Transactions on Network and Service Management"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4275028\/7875178\/07762894.pdf?arnumber=7762894","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T16:20:19Z","timestamp":1642004419000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7762894\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,3]]},"references-count":49,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tnsm.2016.2633511","relation":{},"ISSN":["1932-4537"],"issn-type":[{"type":"print","value":"1932-4537"}],"subject":[],"published":{"date-parts":[[2017,3]]}}}