I know what your packet did last hop: using packet histories to troubleshoot networks
Gigascope: a stream database for network applications