{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,27]],"date-time":"2026-02-27T03:46:35Z","timestamp":1772163995088,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":26,"publisher":"ACM","license":[{"start":{"date-parts":[[2008,8,17]],"date-time":"2008-08-17T00:00:00Z","timestamp":1218931200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2008,8,17]]},"DOI":"10.1145\/1402958.1402970","type":"proceedings-article","created":{"date-parts":[[2008,8,19]],"date-time":"2008-08-19T08:38:39Z","timestamp":1219135119000},"page":"87-98","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":51,"title":["What's going on?"],"prefix":"10.1145","author":[{"given":"Srikanth","family":"Kandula","sequence":"first","affiliation":[{"name":"Massachusetts Institute of Technology, Cambridge, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ranveer","family":"Chandra","sequence":"additional","affiliation":[{"name":"Microsoft Research, Redmond, WA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dina","family":"Katabi","sequence":"additional","affiliation":[{"name":"Massachusetts Institute of Technology, Cambridge, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2008,8,17]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1282380.1282383"},{"key":"e_1_3_2_1_2_1","unstructured":"CoralReef - Workload Characterization. http:\/\/www.caida.org\/analysis\/workload\/.  CoralReef - Workload Characterization. http:\/\/www.caida.org\/analysis\/workload\/."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251375.1251396"},{"key":"e_1_3_2_1_4_1","volume-title":"John Wiley","author":"Duda R.","year":"2002"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863972"},{"key":"e_1_3_2_1_6_1","unstructured":"GAIM\/Pidgin. http:\/\/www.pidgin.im\/.  GAIM\/Pidgin. http:\/\/www.pidgin.im\/."},{"key":"e_1_3_2_1_7_1","unstructured":"IDENT. http:\/\/www.grc.com\/port_113.htm.  IDENT. http:\/\/www.grc.com\/port_113.htm."},{"key":"e_1_3_2_1_8_1","unstructured":"IPMON. http:\/\/ipmon.sprintlabs.com.  IPMON. http:\/\/ipmon.sprintlabs.com."},{"key":"e_1_3_2_1_9_1","volume-title":"Bayesian Theory. John Wiley","author":"Bernardo Jose","year":"2000"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177096"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080119"},{"key":"e_1_3_2_1_12_1","unstructured":"Link-Level Multicast Name Resolution. http:\/\/www.windowsnetworking.com\/articles_tutorials\/Overview-Link-Local-Multicast-Name-Resolution.html.  Link-Level Multicast Name Resolution. http:\/\/www.windowsnetworking.com\/articles_tutorials\/Overview-Link-Local-Multicast-Name-Resolution.html."},{"key":"e_1_3_2_1_13_1","unstructured":"PortPeeker Capture of mySQL Bot attack. http:\/\/www.linklogger.com\/mySQLAttack.htm.  PortPeeker Capture of mySQL Bot attack. http:\/\/www.linklogger.com\/mySQLAttack.htm."},{"key":"e_1_3_2_1_14_1","unstructured":"Nagios: Host Service Network Monitor. http:\/\/nagios.org.  Nagios: Host Service Network Monitor. http:\/\/nagios.org."},{"key":"e_1_3_2_1_15_1","unstructured":"T. Oetiker and D. Rand. Multi Router Traffic Grapher. http:\/\/people.ee.ethz.ch\/~oetiker\/webtools\/mrtg\/.  T. Oetiker and D. Rand. Multi Router Traffic Grapher. http:\/\/people.ee.ethz.ch\/~oetiker\/webtools\/mrtg\/."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"e_1_3_2_1_17_1","volume-title":"Flowscan: A Network Traffic Flow Reporting and Visualization Tool. In USENIX System Admin. Conf.","author":"Plonka D.","year":"2000"},{"key":"e_1_3_2_1_18_1","unstructured":"Port 1081. http:\/\/isc.incidents.org\/port.html?port=1081.  Port 1081. http:\/\/isc.incidents.org\/port.html?port=1081."},{"key":"e_1_3_2_1_19_1","volume-title":"NSDI","author":"Reynolds P.","year":"2006"},{"key":"e_1_3_2_1_20_1","unstructured":"Analysis of the Sapphire Worm. http:\/\/www.caida.org\/analysis\/security\/sapphire\/.  Analysis of the Sapphire Worm. http:\/\/www.caida.org\/analysis\/security\/sapphire\/."},{"key":"e_1_3_2_1_21_1","volume-title":"MIT Press","author":"Smyth P.","year":"1991"},{"key":"e_1_3_2_1_22_1","volume-title":"GrIDS: A Graph-based Intrusion Detection System for Large Networks. In National Information Systems Security Conference","author":"Staniford S.","year":"1996"},{"key":"e_1_3_2_1_23_1","volume-title":"Bad and Spectral. In FOCS","author":"Vempala S.","year":"2000"},{"key":"e_1_3_2_1_24_1","volume-title":"NDSS","author":"Venkataraman S.","year":"2005"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.5555\/646648.699353"},{"key":"e_1_3_2_1_26_1","volume-title":"USENIX Security","author":"Zhang Y.","year":"2000"}],"event":{"name":"SIGCOMM '08: ACM SIGCOMM 2008 Conference","location":"Seattle WA USA","acronym":"SIGCOMM '08","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the ACM SIGCOMM 2008 conference on Data communication"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1402958.1402970","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1402958.1402970","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T10:47:19Z","timestamp":1750243639000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1402958.1402970"}},"subtitle":["learning communication rules in edge networks"],"short-title":[],"issued":{"date-parts":[[2008,8,17]]},"references-count":26,"alternative-id":["10.1145\/1402958.1402970","10.1145\/1402958"],"URL":"https:\/\/doi.org\/10.1145\/1402958.1402970","relation":{"is-identical-to":[{"id-type":"doi","id":"10.1145\/1402946.1402970","asserted-by":"object"}]},"subject":[],"published":{"date-parts":[[2008,8,17]]},"assertion":[{"value":"2008-08-17","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}