{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,9]],"date-time":"2026-01-09T18:28:29Z","timestamp":1767983309387,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":53,"publisher":"ACM","license":[{"start":{"date-parts":[[2013,10,23]],"date-time":"2013-10-23T00:00:00Z","timestamp":1382486400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2013,10,23]]},"DOI":"10.1145\/2504730.2504750","type":"proceedings-article","created":{"date-parts":[[2013,10,22]],"date-time":"2013-10-22T13:42:56Z","timestamp":1382449376000},"page":"441-454","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["Scap"],"prefix":"10.1145","author":[{"given":"Antonis","family":"Papadogiannakis","sequence":"first","affiliation":[{"name":"Institute of Computer Science, Foundation for Research and Technology - Hellas, Heraklion, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michalis","family":"Polychronakis","sequence":"additional","affiliation":[{"name":"Columbia University, New York City, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Evangelos P.","family":"Markatos","sequence":"additional","affiliation":[{"name":"Institute of Computer Science, Foundation for Research and Technology - Hellas, Heraklion, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2013,10,23]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"Application Layer Packet Classifier for Linux (L7-filter). http:\/\/l7-filter.sourceforge.net\/.  Application Layer Packet Classifier for Linux (L7-filter). http:\/\/l7-filter.sourceforge.net\/."},{"key":"e_1_3_2_2_2_1","unstructured":"Libnids. http:\/\/libnids.sourceforge.net\/.  Libnids. http:\/\/libnids.sourceforge.net\/."},{"key":"e_1_3_2_2_3_1","unstructured":"Performance application programming interface. http:\/\/icl.cs.utk.edu\/papi\/.  Performance application programming interface. http:\/\/icl.cs.utk.edu\/papi\/."},{"key":"e_1_3_2_2_4_1","unstructured":"Sourcefire vulnerability research team (vrt). http:\/\/www.snort.org\/vrt\/.  Sourcefire vulnerability research team (vrt). http:\/\/www.snort.org\/vrt\/."},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/360825.360855"},{"key":"e_1_3_2_2_6_1","volume-title":"Efficient Packet Monitoring for Network Management. In IFIP\/IEEE Network Operations and Management Symposium (NOMS)","author":"Anagnostakis K. G.","year":"2002","unstructured":"K. G. Anagnostakis , S. Ioannidis , S. Miltchev , J. Ioannidis , M. B. Greenwald , and J. M. Smith . Efficient Packet Monitoring for Network Management. In IFIP\/IEEE Network Operations and Management Symposium (NOMS) , 2002 . K. G. Anagnostakis, S. Ioannidis, S. Miltchev, J. Ioannidis, M. B. Greenwald, and J. M. Smith. Efficient Packet Monitoring for Network Management. In IFIP\/IEEE Network Operations and Management Symposium (NOMS), 2002."},{"key":"e_1_3_2_2_7_1","volume-title":"Load Shedding in Network Monitoring Applications. In USENIX Annual Technical Conference (ATC)","author":"Barlet-Ros P.","year":"2007","unstructured":"P. Barlet-Ros , G. Iannaccone , J. Sanjuas-Cuxart , D. Amores-Lopez , and J. Sole-Pareta . Load Shedding in Network Monitoring Applications. In USENIX Annual Technical Conference (ATC) , 2007 . P. Barlet-Ros, G. Iannaccone, J. Sanjuas-Cuxart, D. Amores-Lopez, and J. Sole-Pareta. Load Shedding in Network Monitoring Applications. In USENIX Annual Technical Conference (ATC), 2007."},{"key":"e_1_3_2_2_8_1","volume-title":"FFPF: Fairly Fast Packet Filters. In USENIX Symposium on Operating System Design and Implementation (OSDI)","author":"Bos H.","year":"2004","unstructured":"H. Bos , W. de Bruijn , M. Cristea , T. Nguyen , and G. Portokalidis . FFPF: Fairly Fast Packet Filters. In USENIX Symposium on Operating System Design and Implementation (OSDI) , 2004 . H. Bos, W. de Bruijn, M. Cristea, T. Nguyen, and G. Portokalidis. FFPF: Fairly Fast Packet Filters. In USENIX Symposium on Operating System Design and Implementation (OSDI), 2004."},{"key":"e_1_3_2_2_9_1","volume-title":"Per Flow Packet Sampling for High-Speed Network Monitoring. In International Conference on Communication Systems and Networks (COMSNETS)","author":"Canini M.","year":"2009","unstructured":"M. Canini , D. Fay , D. J. Miller , A. W. Moore , and R. Bolla . Per Flow Packet Sampling for High-Speed Network Monitoring. In International Conference on Communication Systems and Networks (COMSNETS) , 2009 . M. Canini, D. Fay, D. J. Miller, A. W. Moore, and R. Bolla. Per Flow Packet Sampling for High-Speed Network Monitoring. In International Conference on Communication Systems and Networks (COMSNETS), 2009."},{"key":"e_1_3_2_2_10_1","unstructured":"Chelsio Communications. T4 unified wire adapters. http:\/\/www.chelsio.com\/adapters\/t4_unified_wire_adapters.  Chelsio Communications. T4 unified wire adapters. http:\/\/www.chelsio.com\/adapters\/t4_unified_wire_adapters."},{"key":"e_1_3_2_2_11_1","volume-title":"Improving Passive Packet Capture: Beyond Device Polling. In International System Administration and Network Engineering Conference (SANE)","author":"Deri L.","year":"2004","unstructured":"L. Deri . Improving Passive Packet Capture: Beyond Device Polling. In International System Administration and Network Engineering Conference (SANE) , 2004 . L. Deri. Improving Passive Packet Capture: Beyond Device Polling. In International System Administration and Network Engineering Conference (SANE), 2004."},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-007-9070-0"},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-7753-3_5"},{"key":"e_1_3_2_2_14_1","volume-title":"Robust TCP Stream Reassembly in the Presence of Adversaries. In USENIX Security Symposium","author":"Dharmapurikar S.","year":"2005","unstructured":"S. Dharmapurikar and V. Paxson . Robust TCP Stream Reassembly in the Presence of Adversaries. In USENIX Security Symposium , 2005 . S. Dharmapurikar and V. Paxson. Robust TCP Stream Reassembly in the Presence of Adversaries. In USENIX Security Symposium, 2005."},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629578"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030086"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879169"},{"key":"e_1_3_2_2_18_1","volume-title":"BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation. In USENIX Security Symposium","author":"Gu G.","year":"2007","unstructured":"G. Gu , P. Porras , V. Yegneswaran , M. Fong , and W. Lee . BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation. In USENIX Security Symposium , 2007 . G. Gu, P. Porras, V. Yegneswaran, M. Fong, and W. Lee. BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation. In USENIX Security Symposium, 2007."},{"key":"e_1_3_2_2_19_1","volume-title":"USENIX Security Symposium","author":"Handley M.","year":"2001","unstructured":"M. Handley , V. Paxson , and C. Kreibich . Network Intrusion Detection: Evasion, Traffic Normalization, and End-to-End Protocol Semantics . In USENIX Security Symposium , 2001 . M. Handley, V. Paxson, and C. Kreibich. Network Intrusion Detection: Evasion, Traffic Normalization, and End-to-End Protocol Semantics. In USENIX Security Symposium, 2001."},{"key":"e_1_3_2_2_20_1","volume-title":"YAF: Yet Another Flowmeter. In USENIX Large Installation System Administration Conference (LISA)","author":"Inacio C. M.","year":"2010","unstructured":"C. M. Inacio and B. Trammell . YAF: Yet Another Flowmeter. In USENIX Large Installation System Administration Conference (LISA) , 2010 . C. M. Inacio and B. Trammell. YAF: Yet Another Flowmeter. In USENIX Large Installation System Administration Conference (LISA), 2010."},{"key":"e_1_3_2_2_21_1","unstructured":"Intel. 82599 10 GbE Controller Datasheet. http:\/\/download.intel.com\/design\/network\/datashts\/82599_datasheet.pdf.  Intel. 82599 10 GbE Controller Datasheet. http:\/\/download.intel.com\/design\/network\/datashts\/82599_datasheet.pdf."},{"key":"e_1_3_2_2_22_1","unstructured":"Intel Server Adapters. Receive Side Scaling on Intel Network Adapters. http:\/\/www.intel.com\/support\/network\/adapter\/pro100\/sb\/cs-027574.htm.  Intel Server Adapters. Receive Side Scaling on Intel Network Adapters. http:\/\/www.intel.com\/support\/network\/adapter\/pro100\/sb\/cs-027574.htm."},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/HPSR.2002.1024219"},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028804"},{"key":"e_1_3_2_2_25_1","volume-title":"Performance Adaptation in Real-Time Intrusion Detection Systems. In International Symposium on Recent Advances in Intrusion Detection (RAID)","author":"Lee W.","year":"2002","unstructured":"W. Lee , J. B. D. Cabrera , A. Thomas , N. Balwalli , S. Saluja , and Y. Zhang . Performance Adaptation in Real-Time Intrusion Detection Systems. In International Symposium on Recent Advances in Intrusion Detection (RAID) , 2002 . W. Lee, J. B. D. Cabrera, A. Thomas, N. Balwalli, S. Saluja, and Y. Zhang. Performance Adaptation in Real-Time Intrusion Detection Systems. In International Symposium on Recent Advances in Intrusion Detection (RAID), 2002."},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2011.5928926"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402980"},{"key":"e_1_3_2_2_28_1","volume-title":"The BSD Packet Filter: A New Architecture for User-level Packet Capture. In Winter USENIX Conference","author":"McCanne S.","year":"1993","unstructured":"S. McCanne and V. Jacobson . The BSD Packet Filter: A New Architecture for User-level Packet Capture. In Winter USENIX Conference , 1993 . S. McCanne and V. Jacobson. The BSD Packet Filter: A New Architecture for User-level Packet Capture. In Winter USENIX Conference, 1993."},{"key":"e_1_3_2_2_29_1","unstructured":"S. McCanne C. Leres and V. Jacobson. Libpcap. http:\/\/www.tcpdump.org\/. Lawrence Berkeley Laboratory.  S. McCanne C. Leres and V. Jacobson. Libpcap. http:\/\/www.tcpdump.org\/. Lawrence Berkeley Laboratory."},{"key":"e_1_3_2_2_30_1","unstructured":"Myricom. 10G-PCIE-8B-S Single-Port 10-Gigabit Ethernet Network Adapters. https:\/\/www.myricom.com\/images\/stories\/10G-PCIE-8B-S.pdf.  Myricom. 10G-PCIE-8B-S Single-Port 10-Gigabit Ethernet Network Adapters. https:\/\/www.myricom.com\/images\/stories\/10G-PCIE-8B-S.pdf."},{"key":"e_1_3_2_2_31_1","volume-title":"http:\/\/www.myricom.com\/scs\/SNF\/doc\/","author":"G.","year":"2010","unstructured":"Myricom. Myricom Sniffer10 G. http:\/\/www.myricom.com\/scs\/SNF\/doc\/ , 2010 . Myricom. Myricom Sniffer10G. http:\/\/www.myricom.com\/scs\/SNF\/doc\/, 2010."},{"key":"e_1_3_2_2_32_1","unstructured":"J. Novak and S. Sturges. Target-Based TCP Stream Reassembly. http:\/\/assets.sourcefire.com\/snort\/developmentpapers\/stream5-model-Aug032007.pdf 2007.  J. Novak and S. Sturges. Target-Based TCP Stream Reassembly. http:\/\/assets.sourcefire.com\/snort\/developmentpapers\/stream5-model-Aug032007.pdf 2007."},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1752046.1752049"},{"key":"e_1_3_2_2_34_1","volume-title":"Tolerating Overload Attacks Against Packet Capturing Systems. In USENIX Annual Technical Conference (ATC)","author":"Papadogiannakis A.","year":"2012","unstructured":"A. Papadogiannakis , M. Polychronakis , and E. P. Markatos . Tolerating Overload Attacks Against Packet Capturing Systems. In USENIX Annual Technical Conference (ATC) , 2012 . A. Papadogiannakis, M. Polychronakis, and E. P. Markatos. Tolerating Overload Attacks Against Packet Capturing Systems. In USENIX Annual Technical Conference (ATC), 2012."},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2011.08.003"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2168836.2168870"},{"key":"e_1_3_2_2_38_1","volume-title":"Secure Networks","author":"Ptacek T. H.","year":"1998","unstructured":"T. H. Ptacek and T. N. Newsham . Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection. Technical report , Secure Networks , Inc ., 1998 . T. H. Ptacek and T. N. Newsham. Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection. Technical report, Secure Networks, Inc., 1998."},{"key":"e_1_3_2_2_39_1","volume-title":"USENIX Annual Technical Conference (ATC)","author":"Rizzo L.","year":"2012","unstructured":"L. Rizzo . netmap : A Novel Framework for Fast Packet I\/O . In USENIX Annual Technical Conference (ATC) , 2012 . L. Rizzo. netmap: A Novel Framework for Fast Packet I\/O. In USENIX Annual Technical Conference (ATC), 2012."},{"key":"e_1_3_2_2_40_1","volume-title":"Snort: Lightweight Intrusion Detection for Networks. In USENIX Large Installation System Administration Conference (LISA)","author":"Roesch M.","year":"1999","unstructured":"M. Roesch . Snort: Lightweight Intrusion Detection for Networks. In USENIX Large Installation System Administration Conference (LISA) , 1999 . M. Roesch. Snort: Lightweight Intrusion Detection for Networks. In USENIX Large Installation System Administration Conference (LISA), 1999."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/505696.505704"},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.5555\/829515.830553"},{"key":"e_1_3_2_2_43_1","volume-title":"USENIX Symposium on Operating System Design and Implementation (OSDI)","author":"Singh S.","year":"2004","unstructured":"S. Singh , C. Estan , G. Varghese , and S. Savage . Automated worm fingerprinting . In USENIX Symposium on Operating System Design and Implementation (OSDI) , 2004 . S. Singh, C. Estan, G. Varghese, and S. Savage. Automated worm fingerprinting. In USENIX Symposium on Operating System Design and Implementation (OSDI), 2004."},{"key":"e_1_3_2_2_44_1","unstructured":"SMC Networks. SMC10GPCIe-XFP Tiger Card 10G PCIe 10GbE XFP Server Adapter. http:\/\/www.smc.com\/files\/AF\/ds_SMC10GPCIe_XFP.pdf.  SMC Networks. SMC10GPCIe-XFP Tiger Card 10G PCIe 10GbE XFP Server Adapter. http:\/\/www.smc.com\/files\/AF\/ds_SMC10GPCIe_XFP.pdf."},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.17"},{"key":"e_1_3_2_2_46_1","unstructured":"Solarfrare. 10GbE LOM\/Controller Family. http:\/\/www.solarflare.com\/Content\/UserFiles\/Documents\/Solarflare_SFC9000_10GbE_Controller_Brief.pdf.  Solarfrare. 10GbE LOM\/Controller Family. http:\/\/www.solarflare.com\/Content\/UserFiles\/Documents\/Solarflare_SFC9000_10GbE_Controller_Brief.pdf."},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.v21:10"},{"key":"e_1_3_2_2_48_1","volume-title":"DiMAPI: An Application Programming Interface for Distributed Network Monitoring. In IFIP\/IEEE Network Operations and Management Symposium (NOMS)","author":"Trimintzios P.","year":"2006","unstructured":"P. Trimintzios , M. Polychronakis , A. Papadogiannakis , M. Foukarakis , E. P. Markatos , and A. Oslebo . DiMAPI: An Application Programming Interface for Distributed Network Monitoring. In IFIP\/IEEE Network Operations and Management Symposium (NOMS) , 2006 . P. Trimintzios, M. Polychronakis, A. Papadogiannakis, M. Foukarakis, E. P. Markatos, and A. Oslebo. DiMAPI: An Application Programming Interface for Distributed Network Monitoring. In IFIP\/IEEE Network Operations and Management Symposium (NOMS), 2006."},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/505672.505678"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/1159913.1159951"},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.27"},{"key":"e_1_3_2_2_52_1","volume-title":"KAIST","author":"Woo S.","year":"2012","unstructured":"S. Woo and K. Park . Scalable TCP Session Monitoring with Symmetric Receive-side Scaling. Technical report, Technical report , KAIST , 2012 . S. Woo and K. Park. Scalable TCP Session Monitoring with Symmetric Receive-side Scaling. Technical report, Technical report, KAIST, 2012."},{"key":"e_1_3_2_2_53_1","volume-title":"Swift: A Fast Dynamic Packet Filter. In USENIX Symposium on Networked Systems Design and Implementation (NSDI)","author":"Wu Z.","year":"2008","unstructured":"Z. Wu , M. Xie , and H. Wang . Swift: A Fast Dynamic Packet Filter. In USENIX Symposium on Networked Systems Design and Implementation (NSDI) , 2008 . Z. Wu, M. Xie, and H. Wang. Swift: A Fast Dynamic Packet Filter. In USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2008."}],"event":{"name":"IMC'13: Internet Measurement Conference","location":"Barcelona Spain","acronym":"IMC'13","sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the 2013 conference on Internet measurement conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2504730.2504750","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2504730.2504750","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T08:48:42Z","timestamp":1750236522000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2504730.2504750"}},"subtitle":["stream-oriented network traffic capture and analysis for high-speed networks"],"short-title":[],"issued":{"date-parts":[[2013,10,23]]},"references-count":53,"alternative-id":["10.1145\/2504730.2504750","10.1145\/2504730"],"URL":"https:\/\/doi.org\/10.1145\/2504730.2504750","relation":{},"subject":[],"published":{"date-parts":[[2013,10,23]]},"assertion":[{"value":"2013-10-23","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}