Flow Based Monitoring of IPv6 - cesnet

More documents

Recommendations

Info

Extended flow record• Basic flow record– key fields: src/dst addess, src/dst port– non-key fields: bytes, pkts• Extended flow record– MAC address : neighbor cache (NC), arp table– Switch port: forwarding database (FDB)– Login : radius serverradiusNC, ARPFDBIP address MAC address Switch port Login ID
Where to get proper information• Mapping <strong>IPv6</strong>/IPv4 address MAC address– neighbor cache, ARP table– passive probes at local networks (ndwatch, arpwatch)– SNMP MIB database on routers• ipv6NetToMediaTable, ipNetToPhysicalTable
Page 1 and 2: Tomáš Podermański, tpoder@cis.vu
Page 5 and 6: Traffic for a single host• Filter
Page 7 and 8: Extended flow record• Basic flow
Page 9: Extended flow record• Basic flow
Page 13 and 14: Where to get proper information•
Page 15: Architecture of the system• netfl
Page 18 and 19: netflow collectorNetFlov9
Page 22 and 23: Architecture of the system• Netwo
Page 24 and 25: Architecture of the system• Home
Page 26 and 27: Architektura DR systému• CLI int
Page 30 and 31: Future work• Extension of nfdump-

Flow Based Monitoring of IPv6 - cesnet

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?