{"id":"https://openalex.org/W2094051614","doi":"https://doi.org/10.1145/1064212.1064222","title":"Packet classification in large ISPs","display_name":"Packet classification in large ISPs","publication_year":2005,"publication_date":"2005-06-06","ids":{"openalex":"https://openalex.org/W2094051614","doi":"https://doi.org/10.1145/1064212.1064222","mag":"2094051614"},"language":"en","primary_location":{"id":"doi:10.1145/1064212.1064222","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1064212.1064222","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2005 ACM SIGMETRICS international conference on Measurement and modeling of computer systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026385549","display_name":"Edith Cohen","orcid":"https://orcid.org/0000-0002-3926-8237"},"institutions":[{"id":"https://openalex.org/I1283103587","display_name":"AT&T (United States)","ror":"https://ror.org/02bbd5539","country_code":"US","type":"company","lineage":["https://openalex.org/I1283103587"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Edith Cohen","raw_affiliation_strings":["AT&T Labs--Research, Florham Park, NJ"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AT&T Labs--Research, Florham Park, NJ","institution_ids":["https://openalex.org/I1283103587"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022565251","display_name":"Carsten Lund","orcid":null},"institutions":[{"id":"https://openalex.org/I1283103587","display_name":"AT&T (United States)","ror":"https://ror.org/02bbd5539","country_code":"US","type":"company","lineage":["https://openalex.org/I1283103587"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Carsten Lund","raw_affiliation_strings":["AT&T Labs--Research, Florham Park, NJ"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AT&T Labs--Research, Florham Park, NJ","institution_ids":["https://openalex.org/I1283103587"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1283103587"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":63,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"73","last_page":"84"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8395119309425354},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.6609528660774231},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6082716584205627},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.563046932220459},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5550965666770935},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5239688754081726},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.49296021461486816},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.47076988220214844},{"id":"https://openalex.org/keywords/random-subspace-method","display_name":"Random subspace method","score":0.46356117725372314},{"id":"https://openalex.org/keywords/throughput","display_name":"Throughput","score":0.41521164774894714},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.18704795837402344}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8395119309425354},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.6609528660774231},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6082716584205627},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.563046932220459},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5550965666770935},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5239688754081726},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49296021461486816},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47076988220214844},{"id":"https://openalex.org/C106135958","wikidata":"https://www.wikidata.org/wiki/Q7291993","display_name":"Random subspace method","level":3,"score":0.46356117725372314},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.41521164774894714},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.18704795837402344},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1064212.1064222","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1064212.1064222","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2005 ACM SIGMETRICS international conference on Measurement and modeling of computer systems","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.4300000071525574}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W79029001","https://openalex.org/W1992811742","https://openalex.org/W2006358124","https://openalex.org/W2022106793","https://openalex.org/W2062652918","https://openalex.org/W2077688755","https://openalex.org/W2081145547","https://openalex.org/W2098580177","https://openalex.org/W2101207848","https://openalex.org/W2102952844","https://openalex.org/W2108084305","https://openalex.org/W2111695485","https://openalex.org/W2115278163","https://openalex.org/W2118826796","https://openalex.org/W2121021091","https://openalex.org/W2126885859","https://openalex.org/W2137145600","https://openalex.org/W2141006890","https://openalex.org/W2143377393","https://openalex.org/W2152092514","https://openalex.org/W2157085439","https://openalex.org/W2535802910","https://openalex.org/W4210937677","https://openalex.org/W6651719176"],"related_works":["https://openalex.org/W1964832275","https://openalex.org/W2389865566","https://openalex.org/W2407804800","https://openalex.org/W2388864896","https://openalex.org/W1845209238","https://openalex.org/W2888937984","https://openalex.org/W2031651184","https://openalex.org/W2031173026","https://openalex.org/W2117265009","https://openalex.org/W2913388591"],"abstract_inverted_index":{"Packet":[0],"classification,":[1],"although":[2],"extensively":[3],"studied,":[4],"is":[5,160],"an":[6,98],"evolving":[7],"problem.":[8],"Growing":[9],"and":[10,26,35,55,62,76,85,101,113,128,149,191,210,232,239],"changing":[11],"needs":[12],"necessitate":[13],"the":[14,37,172,187],"use":[15,63],"of":[16,39,64,87,174,184,189,219],"larger":[17],"filters":[18,75],"with":[19,118],"more":[20,108],"complex":[21],"rules.":[22],"The":[23],"increased":[24],"complexity":[25],"size":[27],"pose":[28],"implementation":[29],"challenges":[30],"on":[31,94,143],"current":[32],"hardware":[33],"solutions":[34],"drive":[36],"development":[38],"software":[40,220],"classifiers,":[41,137],"in":[42,97,162,171,176,226],"particular,":[43],"decision-tree":[44],"based":[45],"classifiers.":[46],"Important":[47],"performance":[48,218],"measures":[49],"for":[50,236],"these":[51],"classifiers":[52,117,122,205,221],"are":[53,194,233],"time":[54,151],"memory":[56,126,132],"due":[57],"to":[58,228],"required":[59],"high":[60],"throughput":[61],"limited":[65],"fast":[66],"memory.We":[67],"analyze":[68],"Tier":[69],"1":[70],"ISP":[71],"data":[72,145,164],"that":[73,104,142,155,159,206,222],"includes":[74],"corresponding":[77],"traffic":[78,190,237,240],"from":[79],"over":[80],"a":[81,91,167,177,180],"hundred":[82],"edge":[83],"routers":[84,231],"thousands":[86],"interfaces.":[88],"We":[89,153],"provide":[90],"comprehensive":[92],"view":[93],"packet":[95],"classification":[96,110],"operational":[99],"network":[100],"glean":[102],"insights":[103],"help":[105],"us":[106],"design":[107],"effective":[109],"algorithms.We":[111],"propose":[112,203],"evaluate":[114],"decision":[115,135],"tree":[116,136],"common":[119],"branches.":[120],"These":[121],"have":[123,146],"linear":[124],"worst-case":[125,150,212],"bounds":[127],"require":[129],"much":[130],"less":[131],"than":[133],"standard":[134],"but":[138],"nonetheless,":[139],"we":[140,202],"show":[141],"our":[144],"similar":[147],"average":[148],"performance.":[152,213],"argue":[154],"common-branches":[156],"exploit":[157],"structure":[158],"present":[161],"real-life":[163],"sets.We":[165],"observe":[166],"strong":[168],"Zipf-like":[169],"pattern":[170],"usage":[173],"rules":[175,185,193],"classifier,":[178],"where":[179],"very":[181],"small":[182,227],"number":[183],"resolves":[186],"bulk":[188],"most":[192],"essentially":[195],"never":[196],"used.":[197],"Inspired":[198],"by":[199],"this":[200],"observation,":[201],"traffic-aware":[204],"obtain":[207],"superior":[208],"average-case":[209,215],"bounded":[211],"Good":[214],"can":[216,223],"boost":[217],"be":[224],"used":[225],"medium":[229],"sized":[230],"also":[234],"important":[235],"analysis":[238],"engineering.":[241]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":7},{"year":2013,"cited_by_count":3},{"year":2012,"cited_by_count":12}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}