Lobster Sensors

About Lobster

As networks get faster and network-centric applications get more complex, our understanding of the Internet continues to diminish. New aspects of Internet behaviour emerge that are either unknown or poorly understood. Denial-of-service attacks, malicious self-replicating programs (worms) and viruses plague the Internet. All these indicate the need for better Internet traffic monitoring.

Network monitoring and measurement is increasingly regarded as an essential function for developing and supporting high-quality network services, building and improving innovative networking technologies, analyzing infrastracture trends and user behavior and improving the security of our cyber-infrastracture.

LOBSTER is a step towards providing an advanced pilot European passive Internet traffic monitoring infrastracture that will improve our understanding of the Internet and will contribute towards solving difficult performance and security problems. Based on appropriate abstractions and willing cooperation among points of presence, this proposal will contribute towards effectively monitoring the underlying network, providing early warning for security incidents, and providing accurate and meaningful measurements of performance.

The main goal of LOBSTER is to deploy an advanced pilot European Internet Traffic Monitoring Infrastracture based on passive monitoring sensors at speeds starting from 2.5 Gbps and possibly up to 10 Gbps. It also aims to develop appropriate data anonymising tools to prohibit unauthorised tampering with the original traffic data, and to develop novel applications to improve monitoring (such as traffic characterisation and zero-day worm spread detection). Another aspect will be to provide anonymised traffic data to interested network researchers and security analysts.

The LOBSTER project consortium consists of nine partners. More information about the Lobster Project can be found here.  

About Lobster Sensors

Lobster Sensors Description

A RED lobster means that the specific placemark on the map, is a sensor that listens to LIVE traffic. It also means, that an actual sensor is installed on the specific geographic location, indicated by the placemark.

A GREEN lobster means that the specific placemark on the map listens to traffic recorded from traces. Some of the trace files being used were found from the MOME project as well as CAIDA's DatCat project.



Appmon is an application for Accurate Per-Application Network Traffic Classification. It aims at providing a better view of the network by identifying which applications generate the most traffic, and which hosts have the greater participation in this traffic. It also offers a real time visualization of the results using a web interface, where one can get all the information the application offers at a glance. (More)


Stager is a system for aggregating and presenting network statistics. Stager is generic and can be customized to present and process any kind of network statistics. The backend collects data and stores reports in a database, automatically handling the aggregation of hourly statistics into days, weeks, and months. The Web frontend presents data in tables, matrices, or plots. The reports are fully customizable, and their definitions are stored in the database.(More)


ABW is an application written on top of LOBSTER DiMAPI (Distributed Monitoring Application Interface) and tracklib library. ABW was developed as part of JRA1 activity of the GN2 project. ABW can use any network adapter to capture packets that is supported by MAPI. Currently it can be a DAG card, a COMBO card or a regular NIC card. Reliable monitoring of high volumes of data is only possible with a specialized monitoring card (such as a DAG card), which leaves enough capacity of the CPU in a host PC to compute network characteristics.(More)

Contact US

Enquiries about LOBSTER can be sent to the project e-mail address at info@ist-lobster.org. We will reply as soon as possible.