Switch based High Cardinality Node Detection

The detection of supernodes with high cardinality is interest for network monitoring and security. Existing schemes supernode rely on data structures that are independent the switching functions. This means each packet traverses switch, both table structure have to be checked which requires significant memory bandwidth. can create a bottleneck reduce speed especially software implementations. In this letter, scheme performs as part Ethernet does not require additional accesses nor separated presented. has been implemented compared existing methods. results show proposed reliably identify while providing up more than 15% when solutions.