Conclusions High speed Continuous traffic monitoring is not a new idea. We are 'just' trying to move it from paper to reality. Until it is done we are no better than others... ... but we believe we have a realistic architecture which is simple enough to be implemented. 500kpps should be feasible on commodity PCs, subject to disk speed