Multiple applications such as TAPS can potentially demand the
flow data. Hence, we author Flow Daemon to address the main bottle neck of the system:
the flow processing queue. This component
collects flows and duplicates them to any application over a TCP/IP
socket. Flow-daemon allows us to process flows asynchronously by
creating a tunable buffer. This enables us to deal with large traffic
variation, and ’spikes’ or micro congestion that happen frequently
in the backbone. We describe in Section 2.1 the design and implementation
choices made for Flow Daemon to highlight the fact that
the performance of the Flow Daemon directly impacts the performance
of TAPS.