I. Introduction
Network monitoring plays a significant role in network management. It is used for a variety of applications such as QOS, billing, traffic engineering, security and anomaly detection. While some of these applications require only flow statistics, many require more specific packet-level information. This requirement is fulfilled by having the network switches copy a fraction of the packets of specific flows and forward these packets to a monitoring device for further analysis. This process is known as sampling.