CoMo is a passive monitoring system that supports arbitrary real time traffic queries. Data streams may have different formats (e.g., packet/flow sequences, etc.) and originate from different platforms (e.g, packet sniffers, routers, wireless APs, ...).