A protocol-adaptive monitoring tree for efficient design of traffic monitoring probes

This paper presents a novel protocol-adaptive monitoring tree (PAM-Tree) algorithm. PAM-Tree is a filtering algorithm that fulfills the needs of a general-purpose traffic monitoring system. PAM-Tree is aimed at overcoming the inefficiencies of existing stream-oriented traffic probes in traffic monitoring scenarios where large numbers of filters change dynamically. Both analytical and experimental performance evaluations show that PAM-Tree has a great potential to be an efficient filtering engine for high-speed loss-less monitoring systems. 2003 Elsevier Science B.V. All rights reserved.