Toward Unified Network Traffic Monitoring Using SIR
It is argued that an ideal traffic query language should give network operators flexibility to detect a diversity of events without sacrificing implementation efficiency, and presents a stream processing model called Streaming Intermediate Representation (SIR), which can represent a wide range of queries while providin...