 FFPF - Theory & Architecture
Integral to FFPF is the concept of flows. Roughly speaking, a flow is to a network what a process is to a computer. We define a flow as a stream of packets that adheres to the same set of characteristics. Thus, all network packets entering a NIC can be grouped into a flow.
FFPF: Fairly Fast Packet Filters
FFPF is a network monitoring framework designed for three things: speed (handling high link rates), scalability (ability to handle multiple applications) and flexibility.
|
|
