This would greatly improve efficiency andincrease throughput. Also, the kernel implementation allows us to schedule orfilter at a per cluster level, allowing us to use NetADHICT to actively managenetwork traffic to improve resource allocation and mitigate malicious activity[15]. We see such extensions as a fruitful area for future research. Availability NetADHICT is licensed under the GNU General Public Licence (GPL), version2 or greater. It is available for download at the CCSL software website athttp://www.ccsl.carleton.ca/software. Conclusion NetADHICT shows great promise in aiding administrators in understandingnetwork behavior. It provides a new way to separate traffic that is normalfrom "interesting" traffic that an administrator is interested in analyzing.With new ways to visualize traffic and providing a network "weather" map,NetADHICT allows administrators to see the status of their whole network at aglance, while also providing ways to investigate smaller flows of traffic.While development and testing are ongoing, by acting as a bridge from higherlevel analysis tools to low level ones, NetADHICT has the potential to improvehow administrators manage network resources. Acknowledgments This work was supported by the Discovery grant program of Canada'sNational Sciences and Engineering Research Council (NSERC) and MITACS. About the Authors Hajime Inoue is a Principal Scientist at ATC-NY in Ithaca, NY. He waspreviously a Postdoctoral Fellow at the Carleton Computer Security Laboratory.He recieved a B.S. in biophysics from the University of Michigan in 1997 and aPh.D. in Computer Science from the University of New Mexico in 2005. He can bereached at . Dana Jansens is currently studying towards a B.C.S. at Carleton Universityspecializing in networks and operating systems and works as a researchassistant in the Carleton Computer Security Lab. In her spare time, she leadsthe Openbox window manager project and studies social justice issues. You canreach her at . Abdulrahman Hijazi graduated with his masters degree in CS at JohnsHopkins University in 2003 with highest honors. He previously had seven yearsof work experience as a system analyst/programmer. He is currently pursuinghis Ph.D. in computer science at Carleton University. You can reach him at. Anil Somayji is an assistant professor in the School of Computer Scienceat Carleton University and is associate director of the Carleton ComputerSecurity Laboratory. His research interests include computer security,operating systems, complex adaptive systems, and artificial life. He receiveda B.S. in Mathematics from the Massachusetts Institute of Technology in 1994and a Ph.D. in Computer Science from the University of New Mexico in 2002. Hecan be reached at . Bibliography [1] Barford, Paul, Jeffery Kline, David Plonka, and Amos Ron, "A SignalAnalysis of Network Traffic Anomalies," IMW '02: Proceedings of the 2ndACM SIGCOMM Workshop on Internet measurment, pp. 71-82, ACM Press, NewYork, NY, USA, 2002. [2] Bernaille, Laurent, Renata Teixeira, Ismael Akodkenou, AugustinSoule, and Kave Salamatian, "Traffic Classification on the Fly," SIGCOMMComput. Commun. Rev., Vol. 36, Num. 2, pp. 23-26, 2006. [3] Combs, Gerald, et al., Wireshark, 2007, http://www.wireshark.org. [4] Corey, V., C. Peterman, S. Shearin, M. S. Greenberg, and J. VanBokkelen, "Network Forensics Analysis," IEEE Internet Computing, Vol.6, Num. 6, pp. 60-66, Nov/Dec, 2002. [5] Duda, R. O., P. E. Hart, and D. G. Stork, "Pattern Classification,"Unsupervised Learning and Clustering, pp.