A general framework for benchmarking firewall optimization techniques
Packet classification on multiple fields