IXP1200 - Network Processors
ICS > CARV > IXP1200 - Network Processors  Site Map.Search.Help.GreekEnglish

.Printer friendly version

 Institute of Computer Science

IXP1200 - Network Processors

In the context of the SCAMPI project for network monitoring we are studying and investigating the use of the IXP1200 network processors for near line-speed packet processing. More precisely we currently focus on the following subjects:

We investigate methods and tools to support fast semi- automated generation of efficient code for the IXP1200. We develope the S2I precompiler which transforms high level packet descriptions to low level efficient micro-C code. Packet descriptions (rules) aim to identify possibly dangerous packets and produce alerts correspondingly.

Moreover, we investigate the use of the IXP1200 as a load sharing module. In this case the IXP1200 will split incoming traffic to more than one monitoring sensors, so as the Monitoring Load can be shared.

Publications

  • I.Charitakis, D.Pnevmatikatos,E.Markatos, K.Anagnostakis S2I: a Tool for Automatic Rule Match Compilation for the IXP Network Processor. Proceedings of the 7th International Workshop on Software and Compilers for Embedded Systems, SCOPES 2003, pp.226-239, September 24-26, Vienna - Austria (pdf).
  • I.Charitakis, K.Anagnostakis,E.Markatos An Active Traffic Splitter Architecture for Intrusion Detection. Proceedings of the IEEE/ACM International Symposium on Modeling, Analysis and Simulation of Computer and Telecommunication Systems, pp. 238-241, Orlando Florida, October 2003. (pdf) (ppt)
  • I.Charitakis, K.Anagnostakis,E.Markatos An Active Traffic Splitter Architecture for Intrusion Detection. Technical Report 323, FORTH-ICS, July 2003 (pdf).

Tools

  • S2I Precompiler
  • Pcap tracefile translator : Translates a pcap tracefile (e.g. from tcpdump) to a stream file for use within the IXP1200 SDK Workbench 2.01a.

Members

Links

IXP1200

Intrusion Detection

OtherProjects

References

 


This work is funded in part by the IST project SCAMPI (IST-2001-32404) funded by the European Union.
This work is funded in part by Intel through an equipment grant

 

 
© Copyright 2007 FOUNDATION FOR RESEARCH & TECHNOLOGY - HELLAS, All rights reserved.