{"id":"https://openalex.org/W4416004278","doi":"https://doi.org/10.1145/3731599.3767445","title":"eCounter: Inline Per-IP Network Monitoring at Millisecond Resolution via eBPF","display_name":"eCounter: Inline Per-IP Network Monitoring at Millisecond Resolution via eBPF","publication_year":2025,"publication_date":"2025-11-07","ids":{"openalex":"https://openalex.org/W4416004278","doi":"https://doi.org/10.1145/3731599.3767445"},"language":null,"primary_location":{"id":"doi:10.1145/3731599.3767445","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3731599.3767445","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the SC '25 Workshops of the International Conference for High Performance Computing, Networking, Storage and Analysis","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003613956","display_name":"Xinxin Mei","orcid":"https://orcid.org/0000-0003-1046-5269"},"institutions":[{"id":"https://openalex.org/I29801172","display_name":"Thomas Jefferson National Accelerator Facility","ror":"https://ror.org/02vwzrd76","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I29801172","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinxin Mei","raw_affiliation_strings":["Computational Sciences and Technology, Jefferson Lab, Newport News, Virginia, USA"],"raw_orcid":"https://orcid.org/0000-0003-1046-5269","affiliations":[{"raw_affiliation_string":"Computational Sciences and Technology, Jefferson Lab, Newport News, Virginia, USA","institution_ids":["https://openalex.org/I29801172"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107427916","display_name":"Jie Chen","orcid":"https://orcid.org/0000-0002-4327-3047"},"institutions":[{"id":"https://openalex.org/I29801172","display_name":"Thomas Jefferson National Accelerator Facility","ror":"https://ror.org/02vwzrd76","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I29801172","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jie Chen","raw_affiliation_strings":["Computational Sciences and Technology, Jefferson Lab, Newport News, Virginia, USA"],"raw_orcid":"https://orcid.org/0000-0002-4327-3047","affiliations":[{"raw_affiliation_string":"Computational Sciences and Technology, Jefferson Lab, Newport News, Virginia, USA","institution_ids":["https://openalex.org/I29801172"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002280762","display_name":"Amitoj Singh","orcid":"https://orcid.org/0009-0009-1632-5612"},"institutions":[{"id":"https://openalex.org/I29801172","display_name":"Thomas Jefferson National Accelerator Facility","ror":"https://ror.org/02vwzrd76","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I29801172","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Amitoj Singh","raw_affiliation_strings":["Computational Sciences and Technology, Jefferson Lab, Newport News, Virginia, USA"],"raw_orcid":"https://orcid.org/0009-0009-1632-5612","affiliations":[{"raw_affiliation_string":"Computational Sciences and Technology, Jefferson Lab, Newport News, Virginia, USA","institution_ids":["https://openalex.org/I29801172"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050863093","display_name":"Ilya Baldin","orcid":"https://orcid.org/0000-0001-7158-0143"},"institutions":[{"id":"https://openalex.org/I29801172","display_name":"Thomas Jefferson National Accelerator Facility","ror":"https://ror.org/02vwzrd76","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I29801172","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ilya Baldin","raw_affiliation_strings":["Computational Sciences and Technology, Jefferson Lab, Newport News, Virginia, USA"],"raw_orcid":"https://orcid.org/0000-0001-7158-0143","affiliations":[{"raw_affiliation_string":"Computational Sciences and Technology, Jefferson Lab, Newport News, Virginia, USA","institution_ids":["https://openalex.org/I29801172"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5013412137","display_name":"David Lawrence","orcid":"https://orcid.org/0000-0003-0502-0847"},"institutions":[{"id":"https://openalex.org/I29801172","display_name":"Thomas Jefferson National Accelerator Facility","ror":"https://ror.org/02vwzrd76","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I29801172","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Lawrence","raw_affiliation_strings":["Computational Sciences and Technology, Jefferson Lab, Newport News, Virginia, USA"],"raw_orcid":"https://orcid.org/0000-0003-0502-0847","affiliations":[{"raw_affiliation_string":"Computational Sciences and Technology, Jefferson Lab, Newport News, Virginia, USA","institution_ids":["https://openalex.org/I29801172"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.34127582,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"908","last_page":"918"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.4523000121116638,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.4523000121116638,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12216","display_name":"Network Time Synchronization Technologies","score":0.12849999964237213,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.07980000227689743,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/millisecond","display_name":"Millisecond","score":0.7089999914169312},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5659999847412109},{"id":"https://openalex.org/keywords/bridge","display_name":"Bridge (graph theory)","score":0.5080000162124634},{"id":"https://openalex.org/keywords/synchronization","display_name":"Synchronization (alternating current)","score":0.47760000824928284},{"id":"https://openalex.org/keywords/filter","display_name":"Filter (signal processing)","score":0.43959999084472656},{"id":"https://openalex.org/keywords/network-monitoring","display_name":"Network monitoring","score":0.4260999858379364},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.4212000072002411},{"id":"https://openalex.org/keywords/plug-and-play","display_name":"Plug and play","score":0.4106999933719635},{"id":"https://openalex.org/keywords/telemetry","display_name":"Telemetry","score":0.40299999713897705},{"id":"https://openalex.org/keywords/data-acquisition","display_name":"Data acquisition","score":0.4004000127315521}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.714900016784668},{"id":"https://openalex.org/C60327585","wikidata":"https://www.wikidata.org/wiki/Q723733","display_name":"Millisecond","level":2,"score":0.7089999914169312},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.5982999801635742},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5659999847412109},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.5080000162124634},{"id":"https://openalex.org/C2778562939","wikidata":"https://www.wikidata.org/wiki/Q1298791","display_name":"Synchronization (alternating current)","level":3,"score":0.47760000824928284},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.43959999084472656},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.4260999858379364},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.4212000072002411},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4185999929904938},{"id":"https://openalex.org/C2780070844","wikidata":"https://www.wikidata.org/wiki/Q857815","display_name":"Plug and play","level":2,"score":0.4106999933719635},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4058000147342682},{"id":"https://openalex.org/C183121708","wikidata":"https://www.wikidata.org/wiki/Q209867","display_name":"Telemetry","level":2,"score":0.40299999713897705},{"id":"https://openalex.org/C163985040","wikidata":"https://www.wikidata.org/wiki/Q1172399","display_name":"Data acquisition","level":2,"score":0.4004000127315521},{"id":"https://openalex.org/C178148046","wikidata":"https://www.wikidata.org/wiki/Q217491","display_name":"Network Time Protocol","level":3,"score":0.3596999943256378},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.35830000042915344},{"id":"https://openalex.org/C49154492","wikidata":"https://www.wikidata.org/wiki/Q5300","display_name":"Central processing unit","level":2,"score":0.34610000252723694},{"id":"https://openalex.org/C113508815","wikidata":"https://www.wikidata.org/wiki/Q193446","display_name":"Packet switching","level":3,"score":0.33379998803138733},{"id":"https://openalex.org/C557945733","wikidata":"https://www.wikidata.org/wiki/Q389772","display_name":"Data transmission","level":2,"score":0.33090001344680786},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.30790001153945923},{"id":"https://openalex.org/C119666444","wikidata":"https://www.wikidata.org/wiki/Q5977280","display_name":"Temporal resolution","level":2,"score":0.2992999851703644},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.296099990606308},{"id":"https://openalex.org/C74366991","wikidata":"https://www.wikidata.org/wiki/Q2755335","display_name":"Network processor","level":3,"score":0.2939999997615814},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.2921000123023987},{"id":"https://openalex.org/C19275194","wikidata":"https://www.wikidata.org/wiki/Q222903","display_name":"Multiplexing","level":2,"score":0.2906999886035919},{"id":"https://openalex.org/C159631557","wikidata":"https://www.wikidata.org/wiki/Q1546066","display_name":"Networking hardware","level":2,"score":0.28940001130104065},{"id":"https://openalex.org/C138268822","wikidata":"https://www.wikidata.org/wiki/Q1051925","display_name":"Resolution (logic)","level":2,"score":0.2892000079154968},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.28859999775886536},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28540000319480896},{"id":"https://openalex.org/C761482","wikidata":"https://www.wikidata.org/wiki/Q118093","display_name":"Transmission (telecommunications)","level":2,"score":0.27230000495910645},{"id":"https://openalex.org/C103987645","wikidata":"https://www.wikidata.org/wiki/Q985806","display_name":"Network interface","level":3,"score":0.26899999380111694},{"id":"https://openalex.org/C177454536","wikidata":"https://www.wikidata.org/wiki/Q578290","display_name":"Emphasis (telecommunications)","level":2,"score":0.2680000066757202},{"id":"https://openalex.org/C95362637","wikidata":"https://www.wikidata.org/wiki/Q54366","display_name":"Packet analyzer","level":3,"score":0.25690001249313354},{"id":"https://openalex.org/C2779664074","wikidata":"https://www.wikidata.org/wiki/Q3518405","display_name":"Terminal (telecommunication)","level":2,"score":0.2563000023365021}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3731599.3767445","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3731599.3767445","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the SC '25 Workshops of the International Conference for High Performance Computing, Networking, Storage and Analysis","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G869046629","display_name":null,"funder_award_id":"LD2513","funder_id":"https://openalex.org/F4320338382","funder_display_name":"Thomas Jefferson National Accelerator Facility"}],"funders":[{"id":"https://openalex.org/F4320338382","display_name":"Thomas Jefferson National Accelerator Facility","ror":"https://ror.org/02vwzrd76"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1994926493","https://openalex.org/W2021200789","https://openalex.org/W2137941774","https://openalex.org/W2769038759","https://openalex.org/W3011196476","https://openalex.org/W3046235073","https://openalex.org/W3168158840","https://openalex.org/W3205377733","https://openalex.org/W3209399855","https://openalex.org/W4200364215","https://openalex.org/W4307020348","https://openalex.org/W4317826910","https://openalex.org/W4387828603","https://openalex.org/W4400410006","https://openalex.org/W4400649463","https://openalex.org/W4401176274","https://openalex.org/W4401176811","https://openalex.org/W4405440200"],"related_works":[],"abstract_inverted_index":{"Scientific":[0],"data":[1,104],"acquisition":[2],"(SciDAQ)":[3],"systems":[4],"are":[5],"shifting":[6],"from":[7],"archive-based":[8],"workflows":[9],"to":[10,77,89,139],"streaming":[11,128],"paradigms,":[12],"where":[13],"real-time,":[14],"fine-grained":[15],"network":[16],"monitoring":[17],"becomes":[18],"essential.":[19],"While":[20],"P4-enabled":[21],"devices":[22],"offer":[23],"per-packet":[24],"in-band":[25],"observability,":[26],"they":[27],"require":[28],"specialized":[29],"switches":[30],"and":[31,66,73,118,121],"routers.":[32],"Host-side":[33],"tools":[34],"like":[35],"Prometheus":[36],"exporters":[37],"lack":[38],"sufficient":[39],"temporal":[40],"granularity.":[41],"To":[42],"bridge":[43],"this":[44],"gap,":[45],"we":[46],"present":[47],"eCounter,":[48],"a":[49,81,101],"lightweight,":[50],"hardware-agnostic,":[51],"inline":[52],"telemetry":[53],"agent":[54],"built":[55],"on":[56,125],"extended":[57],"Berkeley":[58],"Packet":[59],"Filter":[60],"(eBPF).":[61],"eCounter":[62,108],"captures":[63],"per-interface":[64],"ingress":[65],"egress":[67],"traffic,":[68],"categorized":[69],"by":[70],"IP":[71],"address":[72],"protocol,":[74],"at":[75,100],"millisecond":[76],"sub-millisecond":[78],"resolution.":[79],"In":[80],"100":[82],"Gbps":[83],"environment,":[84],"it":[85,134],"continuously":[86],"exports":[87],"up":[88],"3,257":[90],"time-series":[91],"bins":[92],"per":[93],"second":[94],"with":[95],"only":[96],"4%":[97],"CPU":[98,116],"utilization":[99],"35":[102],"KiB/s":[103],"rate.":[105],"We":[106],"evaluate":[107],"across":[109],"diverse":[110],"NIC":[111],"MTU":[112],"settings,":[113],"hook":[114],"types,":[115],"architectures":[117],"operating":[119],"systems,":[120],"observed":[122],"negligible":[123],"impact":[124],"concurrent":[126],"high-throughput":[127],"applications.":[129],"Complexity":[130],"analysis":[131],"confirms":[132],"that":[133],"can":[135],"be":[136],"readily":[137],"scaled":[138],"distributed":[140],"SciDAQ":[141],"deployments.":[142]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-11-07T00:00:00"}