SCAMPI: A Scalable and Programmable Architecture for Monitoring Gigabit Networks

  • Jan Coppens
  • Steven Van den Berghe
  • Herbert Bos
  • Evangelos P. Markatos
  • Filip De Turck
  • Arne Oslebo
  • Sven Ubik
Part of the Lecture Notes in Computer Science book series (LNCS, volume 2839)

Abstract

Effective network monitoring is vital for the growing number of control and management applications typically found in present-day networks. Increasing link speeds and the diversity of monitoring applications’ needs have exposed severe limitations of existing monitoring techniques. As a response, the EU IST SCAMPI project designs and implements a scalable and programmable architecture for monitoring multi-gigabit networks. The SCAMPI architecture has an expressive programming interface, uses intelligent hardware, provides user policy management and resource control, and achieves scalability through parallelism. This paper addresses the problems with current high-speed network monitoring and presents the system architecture and components of the SCAMPI platform.

Keywords

High-speed Network Monitoring Programmable Monitoring Open Monitoring Platform 

References

  1. 1.
    Arramreddy, S., Riley, D.: PCI-X 2.0 White Paper, April 5 (2002)Google Scholar
  2. 2.
    Bace, R., Mell, P.: Intrusion Detection Systems, National Institute of Standards and Technology (NIST), Special Publication 800-31 (2001)Google Scholar
  3. 3.
    Bayne, J.S.: Unleashing the power of networks, http://www.johnsoncontrols.com/Metasys/articles/article7.htm
  4. 4.
    Blaze, M., Feigenbaum, J., Ioannidis, J., Keromytis, A.D.: The KeyNote trustmanagement system version 2, Network Working Group, RFC2704 (September 1999)Google Scholar
  5. 5.
    Bos, H., Samwel, B.: Safe kernel programming in the OKE. In: Proceedings of OPENARCH 2002, New York, USA (June 2002)Google Scholar
  6. 6.
    Bos, H., Samwel, B.: The OKE Corral: Code Organisation and Reconfiguration at Runtime using Active Linking. In: Sterbenz, J.P.G., Takada, O., Tschudin, C.F., Plattner, B. (eds.) IWAN 2002. LNCS, vol. 2546, pp. 32–47. Springer, Heidelberg (2002)CrossRefGoogle Scholar
  7. 7.
  8. 8.
    Iannaccone, G., Diot, C., Graham, I., McKeown, N.: Monitoring Very High Speed Links. In: ACM SIGCOM Internet Measurement Workshop (2001)Google Scholar
  9. 9.
  10. 10.
  11. 11.
    Insolvibile, G.: Kernel korner: The linux socket filter: Sniffing bytes over the network. The Linux Journal 86 (June 2001)Google Scholar
  12. 12.
    Intel IXP1200 Network Processor Family – The Foundation of a Total Development Environment for Next-Generation Networks, Intel Product Overview (2001)Google Scholar
  13. 13.
    IST-SCAMPI: A Scaleable Monitoring Platform for the Internet, http://www.istscampi.org
  14. 14.
    Jacobson, V., Leres, C., McCanne, S.: pcap manual page, Lawrence Berkeley National Laboratory, University of California, Berkeley, CA (2001)Google Scholar
  15. 15.
    Juniper, M5 and M10 Internet Routers Hardware Guide (2002), http://www.juniper.net
  16. 16.
    Kohler, E., Morris, R., Chen, B., Jannotti, J., Kaashoek, M.F.: The Click Modular Router. IEEE/ACM Transactions on Computer Systems 18(3), 263–297 (2000)CrossRefGoogle Scholar
  17. 17.
    McCanne, S., Jacobson, V.: The BSD packet filter: A new architecture for user-level packet capture. In: USENIX Winter, pp. 259–270 (1993)Google Scholar
  18. 18.
    Rubini, A., Corbet, J.: Linux Device Drivers, 2nd edn. O’Reilly, Sebastopol (2001)MATHGoogle Scholar
  19. 19.
    SCAMPI D0.1, Description and analysis of the state-of-the-art, http://www.istscampi.org/publications/deliverables/D0.1.pdf
  20. 20.

Copyright information

© IFIP International Federation for Information Processing 2003

Authors and Affiliations

  • Jan Coppens
    • 1
  • Steven Van den Berghe
    • 1
  • Herbert Bos
    • 2
  • Evangelos P. Markatos
    • 3
  • Filip De Turck
    • 1
  • Arne Oslebo
    • 4
  • Sven Ubik
    • 5
  1. 1.INTECGhent UniversityGentBelgium
  2. 2.LIACSLeiden UniversityLeidenThe Netherlands
  3. 3.ICS FORTHHeraklionGreece
  4. 4.UNINETTTrondheimNorway
  5. 5.CESNETPragueCzech Republic

Personalised recommendations