Aguri is an aggregation-based traffic profiler targeted for near real-time, long-term, and wide-area traffic monitoring. Aguri
adapts itself to spatial traffic distribution by aggregating small volume flows into aggregates, and achieves temporal aggregation
by creating a summary of summaries applying the same algorithm to its outputs. A set of scripts are used for archiving and
visualizing summaries in different time scales. Aguri does not need a predefined rule set and is capable of detecting an unexpected
increase of unknown protocols or DoS attacks, which considerably simplifies the task of network monitoring.
Once aggregates are identified and profiled, it becomes possible to make use of the profile records to control the aggregates
in best-effort traffic. As a possible solution, we propose a technique to preferentially drop packets from aggregates whose
volume is more than the fairshare. Our prototype implementation demonstrates its ability to protect the network from DoS attacks
and to provide rough fairness among aggregates.