Mechanism based on HCBF for large flow inspect
基于HCBF的大流检测机制*

For the limited counter overflow probability in counting Bloom filter, this paper proposed a novel mechanism based on hierarchy counting Bloom filter(HCBF) for large flow inspect. By extending the standard structure of counting Bloom filter(CBF) to multi-layer with the overflow probability void feature, the mechanism could not only adjust the paramer configed, but also controled the false probability of large flow inspect. Experiments are conducted based on the data either randomly produced by computer or sampled from the real network trace. Results demonstrate that the proposed mechanism can achieve finer space saving and better accuracy with same overflow probability.