**2. Ksensor: Multithreaded kernel-level probe**

In a previous work [Muñoz et al., 2007], our research group, NQaS, proposed a design for an architecture able to cope with high-speed traffic monitoring using commodity hardware. This kernel-level framework is called Ksensor and its design is based on the following elements:


This section explains the main aspects of Ksensor, because of its importance in the validation of the mathematical model which will be explained in a subsequent section.
