{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,19]],"date-time":"2026-08-19T20:05:26Z","timestamp":1787169926554,"version":"build-2736575974"},"reference-count":12,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2012,1,16]],"date-time":"2012-01-16T00:00:00Z","timestamp":1326672000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGCOMM Comput. Commun. Rev."],"published-print":{"date-parts":[[2012,1,16]]},"abstract":"<jats:p>Long-term historical analysis of captured network traffic is a topic of great interest in network monitoring and network security. A critical requirement is the support for fast discovery of packets that satisfy certain criteria within large-scale packet repositories. This work presents the first indexing scheme for network packet traces based on compressed bitmap indexing principles. Our approach supports very fast insertion rates and results in compact index sizes. The proposed indexing methodology builds upon libpcap, the de-facto reference library for accessing packet-trace repositories. Our solution is therefore backward compatible with any solution that uses the original library. We experience impressive speedups on packet-trace search operations: our experiments suggest that the index-enabled libpcap may reduce the packet retrieval time by more than 1100 times.<\/jats:p>","DOI":"10.1145\/2096149.2096156","type":"journal-article","created":{"date-parts":[[2012,1,17]],"date-time":"2012-01-17T12:21:44Z","timestamp":1326802904000},"page":"47-53","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":14,"title":["pcapIndex"],"prefix":"10.1145","volume":"42","author":[{"given":"Francesco","family":"Fusco","sequence":"first","affiliation":[{"name":"IBM Research, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xenofontas","family":"Dimitropoulos","sequence":"additional","affiliation":[{"name":"ETH, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michail","family":"Vlachos","sequence":"additional","affiliation":[{"name":"IBM Research , Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Luca","family":"Deri","sequence":"additional","affiliation":[{"name":"ntop.org, Pisa, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2012,1,16]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"Endace Measurement Systems. http:\/\/www.endace.com.  Endace Measurement Systems. http:\/\/www.endace.com."},{"key":"e_1_2_1_2_1","unstructured":"TCPDUMP\/LIBPCAP public repository. http:\/\/www.tcpdump.org\/.  TCPDUMP\/LIBPCAP public repository. http:\/\/www.tcpdump.org\/."},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/VAST.2006.261437"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1739041.1739071"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-12365-8_6"},{"key":"e_1_2_1_6_1","volume-title":"Proc. of the USENIX Annual Technical Conf.","author":"Desnoyers P. J.","year":"2007","unstructured":"P. J. Desnoyers and P. Shenoy . Hyperion: high volume stream archival for retrospective querying . In Proc. of the USENIX Annual Technical Conf. , 2007 . P. J. Desnoyers and P. Shenoy. Hyperion: high volume stream archival for retrospective querying. In Proc. of the USENIX Annual Technical Conf., 2007."},{"key":"e_1_2_1_7_1","first-page":"3","article-title":"Net-fli: on-the-fly compression, archiving and indexing of streaming network traffic","author":"Fusco F.","year":"2010","unstructured":"F. Fusco , M. P. Stoecklin , and M. Vlachos . Net-fli: on-the-fly compression, archiving and indexing of streaming network traffic . Proc. VLDB Endow. , 3 , 2010 . F. Fusco, M. P. Stoecklin, and M. Vlachos. Net-fli: on-the-fly compression, archiving and indexing of streaming network traffic. Proc. VLDB Endow., 3, 2010.","journal-title":"Proc. VLDB Endow."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/DRCN.2009.5340032"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402980"},{"key":"e_1_2_1_10_1","first-page":"2","volume-title":"Proc. of the USENIX Winter Conf.","author":"McCanne S.","year":"1993","unstructured":"S. McCanne and V. Jacobson . The BSD packet filter: a new architecture for user-level packet capture . In Proc. of the USENIX Winter Conf. , pages 2 -- 2 , 1993 . S. McCanne and V. Jacobson. The BSD packet filter: a new architecture for user-level packet capture. In Proc. of the USENIX Winter Conf., pages 2--2, 1993."},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/1316689.1316694"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1132863.1132864"}],"container-title":["ACM SIGCOMM Computer Communication Review"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2096149.2096156","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2096149.2096156","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T05:54:34Z","timestamp":1750226074000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2096149.2096156"}},"subtitle":["an index for network packet traces with legacy compatibility"],"short-title":[],"issued":{"date-parts":[[2012,1,16]]},"references-count":12,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2012,1,16]]}},"alternative-id":["10.1145\/2096149.2096156"],"URL":"https:\/\/doi.org\/10.1145\/2096149.2096156","relation":{},"ISSN":["0146-4833"],"issn-type":[{"value":"0146-4833","type":"print"}],"subject":[],"published":{"date-parts":[[2012,1,16]]},"assertion":[{"value":"2012-01-16","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}