The architecture of CoralReef: an Internet traffic monitoring software suite
Ken Keys, David Moore, Ryan Koga, Edouard Lagache, Michael Tesch, kc claffy · 2001
Passive data collection tools have traditionally been designed for specific tasks such as accounting (NeTraMet [1]) or packet capture (tcpdump [2]). The CoralReef suite was designed to provide a uniform interface to passive data for a wide range of applications at many levels, from raw capture to real-time report generation. CoralReef provides a convenient set of passive data tools for a diverse audience, from network administrators to researchers. CoralReef is a package of libraries, device drivers, classes, and applications written in, and for use with, several programming languages. By highlighting design and architectural decisions at all levels in CoralReef, we will show how CoralReef is a powerful, extensible, efficient, and convenient package for passive data collection and analysis.