Andrew W. Moore A. J. McGregor Jim W. Breen A Comparison of System Monitoring Methods, Passive Network Monitoring and Kernel Instrumentation. 16-38 1996 30 Operating Systems Review 1 db/journals/sigops/sigops30.html#MooreMB96 http://doi.acm.org/10.1145/218646.218648