\begin{thebibliography}{10}

\bibitem{certsql}
``{CERT Advisory CA-2003-04 MS-SQL Server Worm},'' Nov. 2003,
\newblock URL \url{http://www.cert.org/advisories/CA-2003-04.html} accessed 03
  May 2004.

\bibitem{slammer}
D.~Moore, V.~Paxson, S.~Savage, C.~Shannon, S.~Staniford, and N.~Weaver,
\newblock ``The spread of the {S}apphire/{S}lammer worm,'' 2003,
\newblock URL \url{http://www.cs.berkeley.edu/~nweaver/sapphire} accessed 03
  May 2004.

\bibitem{ourmon}
J.~Binkley,
\newblock ``{O}urmon web page,'' URL \url{http://ourmon.cat.pdx.edu/ourmon}
  accessed 05 May 2004.

\bibitem{tcpdump}
``{T}cpdump/libpcap home page,'' URL \url{ http://www.tcpdump.org} accessed 03
  May 2004.

\bibitem{snort}
M.~Roesch,
\newblock ``{S}nort---{L}ightweight intrusion detection for networks,''
\newblock in {\em Proceedings of the USENIX LISA '99 Conference}, Nov. 1999.

\bibitem{ntop1}
L.~Deri and S.~Suin,
\newblock ``Practical network security: {E}xperiences with ntop,''
\newblock {\em IEEE Communications Magazine}, May 2000.

\bibitem{ntop2}
``{N}top distribution page,'' URL \url{http://sourceforge.net/projects/ntop}
  accessed 03 May 2004.

\bibitem{rmon2}
S.~Waldbusser,
\newblock ``Rfc 2021: Remote network monitoring management information base
  version 2,'' Jan. 1997.

\bibitem{rrdtool}
``Rrdtool web page,'' URL
  \url{http://people.ee.ethz.ch/~oetiker/webtools/rrdtool} accessed 03 May
  2004.

\bibitem{peterson}
S.~Karlin and L.~Peterson,
\newblock ``Maximum packet rates for full-duplex {E}thernet,''
\newblock Tech. {R}ep. TR-645-02, Department of Computer Science, Princeton
  University, Feb. 2002.

\bibitem{schneier}
B.~Schneier,
\newblock {\em Secrets and Lies},
\newblock Wiley Computer Publishing, 2000.

\bibitem{mogul}
J.C. Mogul and K.K. Ramakrishnan,
\newblock ``Eliminating receive livelock in an interrupt-driven kernel,''
\newblock {\em ACM Transactions on Computer Systems}, vol. 15, no. 3, Aug.
  1997.

\bibitem{xpf}
S.~Ioannidis, K.~Anagnostakis, J.~Ioannidis, and A.~D. Keromytis,
\newblock ``{xPF}: {P}acket filtering for low-cost network monitoring,''
\newblock in {\em Proceedings of the IEEE Workshop on High-Performance
  Switching and Routing (MPSR)}, May 2002.

\bibitem{begel}
A.~Begel, S.~McCanne, and S.~Graham,
\newblock ``{BPF+}: {E}xploiting global data-flow optimization in a generalized
  packet filter architecture,''
\newblock in {\em Proceedings of ACM SIGCOMM}, Sept. 1999.

\bibitem{kemmerer}
C.~Kruegel, F.~Valeur, G~Vignka, and R.~Kemmerer,
\newblock ``Stateful intrusion detection in high-speed networks,''
\newblock in {\em Proceedings IEEE Symposium Security and Privacy}, 2002.

\bibitem{ixp}
M.~Adiletta, M.~Rosenbluth, D.~Bernstein, G.~Worich, and H.~Wilkinson,
\newblock ``The next generation of {I}ntel {IXP} network processors,''
\newblock {\em Intel Technology Journal}, Aug. 2002.

\end{thebibliography}
