Situational awareness and network traffic analysis

As network traffic increases, the problems associated with monitoring and analyzing the traffic on high speed networks become increasingly difficult. In this paper, we consider a variety of techniques for analyzing such data and using it to develop a variety of network views that reflect the status of the monitored environment. The powers of the monitoring approach and the analysis techniques is such that it is possible, on one hand, to identify network wide phenomena, and, on the other, to look at the behavior of individual network hosts.