{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T21:20:06Z","timestamp":1782940806871,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":45,"publisher":"ACM","license":[{"start":{"date-parts":[[2008,10,20]],"date-time":"2008-10-20T00:00:00Z","timestamp":1224460800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2008,10,20]]},"DOI":"10.1145\/1452520.1452551","type":"proceedings-article","created":{"date-parts":[[2008,10,22]],"date-time":"2008-10-22T12:25:44Z","timestamp":1224678344000},"page":"257-270","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":56,"title":["Fast monitoring of traffic subpopulations"],"prefix":"10.1145","author":[{"given":"Anirudh","family":"Ramachandran","sequence":"first","affiliation":[{"name":"Georgia Tech, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Srinivasan","family":"Seetharaman","sequence":"additional","affiliation":[{"name":"Georgia Tech, Atanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nick","family":"Feamster","sequence":"additional","affiliation":[{"name":"Georgia Tech, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vijay","family":"Vazirani","sequence":"additional","affiliation":[{"name":"Georgia Tech, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2008,10,20]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Idle-scanning and Related IPID Games. http:\/\/nmap.org\/idlescan.html.  Idle-scanning and Related IPID Games. http:\/\/nmap.org\/idlescan.html."},{"key":"e_1_3_2_1_2_1","unstructured":"Original posting describing FTP bounce scan. http:\/\/nmap.org\/hobbit.ftpbounce.txt.  Original posting describing FTP bounce scan. http:\/\/nmap.org\/hobbit.ftpbounce.txt."},{"key":"e_1_3_2_1_3_1","unstructured":"Arbor Networks. http:\/\/www.arbornetworks.com.  Arbor Networks. http:\/\/www.arbornetworks.com."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637210"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177101"},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of ACM SIGMETRICS Workshop on Large Scale Network Inference (LSNI)","author":"Choi B.-Y.","year":"2005","unstructured":"B.-Y. Choi and S. Bhattacharyya . On the Accuracy and Overhead of Cisco Sampled NetFlow . In Proceedings of ACM SIGMETRICS Workshop on Large Scale Network Inference (LSNI) , June 2005 . B.-Y. Choi and S. Bhattacharyya. On the Accuracy and Overhead of Cisco Sampled NetFlow. In Proceedings of ACM SIGMETRICS Workshop on Large Scale Network Inference (LSNI), June 2005."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/166237.166256"},{"key":"e_1_3_2_1_9_1","volume-title":"June","author":"Duffield N.","year":"2007","unstructured":"N. Duffield . A Framework for Packet Selection and Reporting. IETF Internet Draft draft-ietf-psamp-framework-12.txt , June 2007 . N. Duffield. A Framework for Packet Selection and Reporting. IETF Internet Draft draft-ietf-psamp-framework-12.txt, June 2007."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/505202.505232"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863992"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/948205.948228"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2001.916283"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015495"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/859716.859719"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/285237.285287"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/90.929850"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/948205.948235"},{"key":"e_1_3_2_1_19_1","first-page":"490","volume-title":"Proceedings of International Conference on Computer Communications and Networks","author":"Huang Y.","year":"2001","unstructured":"Y. Huang and J. Pullen . Countering Denial of Service Attacks using Congestion Triggered Packet Sampling and Filtering . In Proceedings of International Conference on Computer Communications and Networks , pages 490 -- 494 , 2001 . Y. Huang and J. Pullen. Countering Denial of Service Attacks using Congestion Triggered Packet Sampling and Filtering. In Proceedings of International Conference on Computer Communications and Networks, pages 490--494, 2001."},{"key":"e_1_3_2_1_20_1","unstructured":"InMon sFlow. http:\/\/www.inmon.com\/technology.  InMon sFlow. http:\/\/www.inmon.com\/technology."},{"key":"e_1_3_2_1_21_1","unstructured":"Juniper traffic sampling and forwarding overview. http:\/\/www. juniper.net\/techpubs\/software\/junos\/junos71\/swconfig71-policy\/html\/sampling-overview.html.  Juniper traffic sampling and forwarding overview. http:\/\/www. juniper.net\/techpubs\/software\/junos\/junos71\/swconfig71-policy\/html\/sampling-overview.html."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080119"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251086.1251095"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1005686.1005709"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1064212.1064221"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2006.326"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1375457.1375472"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1355734.1355736"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177102"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402980"},{"key":"e_1_3_2_1_31_1","unstructured":"Cisco NetFlow. http:\/\/www.cisco.com\/en\/US\/products\/ps6601\/products_ios_protocol_group_home.html.  Cisco NetFlow. http:\/\/www.cisco.com\/en\/US\/products\/ps6601\/products_ios_protocol_group_home.html."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1159913.1159947"},{"key":"e_1_3_2_1_33_1","volume-title":"Behavior Of Bots In Traffic Traces. Technical report","author":"Ringberg H.","year":"2008","unstructured":"H. Ringberg , A. Soule , and M. Caeser . Behavior Of Bots In Traffic Traces. Technical report , Princeton University , 2008 . Number forthcoming. H. Ringberg, A. Soule, and M. Caeser. Behavior Of Bots In Traffic Traces. Technical report, Princeton University, 2008. Number forthcoming."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2001.932167"},{"key":"e_1_3_2_1_35_1","volume-title":"Proc. 5th USENIX NSDI","author":"Sekar V.","year":"2008","unstructured":"V. Sekar , M. K. Reiter , W. Willinger , H. Zhang , R. R. Kompella , and D. G. Andersen . cSamp: A system for network-wide flow monitoring . In Proc. 5th USENIX NSDI , San Francisco, CA , Apr. 2008 . V. Sekar, M. K. Reiter, W. Willinger, H. Zhang, R. R. Kompella, and D. G. Andersen. cSamp: A system for network-wide flow monitoring. In Proc. 5th USENIX NSDI, San Francisco, CA, Apr. 2008."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080114"},{"key":"e_1_3_2_1_37_1","volume-title":"An Interdisciplinary Approach to Designing Fast Networked Devices","author":"Varghese G.","year":"2004","unstructured":"G. Varghese . Network Algorithmics : An Interdisciplinary Approach to Designing Fast Networked Devices . Morgan Kaufmann Publishers Inc ., 2004 . G. Varghese. Network Algorithmics: An Interdisciplinary Approach to Designing Fast Networked Devices. Morgan Kaufmann Publishers Inc., 2004."},{"key":"e_1_3_2_1_38_1","unstructured":"F. Vaskovich. Nmap stealth port scanner. http:\/\/www.insecure.org\/nmap\/index.html 2002.  F. Vaskovich. Nmap stealth port scanner. http:\/\/www.insecure.org\/nmap\/index.html 2002."},{"key":"e_1_3_2_1_39_1","unstructured":"Average spam message size at record low. http:\/\/www.virusbtn.com\/news\/2008\/04_03a.xml?rss.  Average spam message size at record low. http:\/\/www.virusbtn.com\/news\/2008\/04_03a.xml?rss."},{"key":"e_1_3_2_1_40_1","unstructured":"Report: 95 percent of all email has that spammy smell. http:\/\/arstechnica.com\/news.ars\/post\/20071212-report-95-percent-of-all-e-mail-has-that-spammy-smell.html.  Report: 95 percent of all email has that spammy smell. http:\/\/arstechnica.com\/news.ars\/post\/20071212-report-95-percent-of-all-e-mail-has-that-spammy-smell.html."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080112"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/996566.996733"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/1282380.1282392"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863990"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028802"},{"key":"e_1_3_2_1_46_1","volume-title":"Work in Progress","author":"Zseby T.","year":"2005","unstructured":"T. Zseby , M. Molina , N. Duffield , S. Niccolini , and F. Raspall . Sampling and Filtering Techniques for IP Packet Selection, Internet-Draft, draft-ietf-psamp-sample-tech-07.txt , Work in Progress , 2005 . T. Zseby, M. Molina, N. Duffield, S. Niccolini, and F. Raspall. Sampling and Filtering Techniques for IP Packet Selection, Internet-Draft, draft-ietf-psamp-sample-tech-07.txt, Work in Progress, 2005."}],"event":{"name":"IMC08: Internet Measurement Conference","location":"Vouliagmeni Greece","acronym":"IMC08","sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","SIGCOMM ACM Special Interest Group on Data Communication","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 8th ACM SIGCOMM conference on Internet measurement"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1452520.1452551","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1452520.1452551","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T13:56:34Z","timestamp":1750254994000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1452520.1452551"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2008,10,20]]},"references-count":45,"alternative-id":["10.1145\/1452520.1452551","10.1145\/1452520"],"URL":"https:\/\/doi.org\/10.1145\/1452520.1452551","relation":{},"subject":[],"published":{"date-parts":[[2008,10,20]]},"assertion":[{"value":"2008-10-20","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}