Flow Based Monitoring of IPv6 - cesnet

More documents

Recommendations

Info

Future work• Extension of nfdump– Not “raping” mpls fields for user identification– Pathes for nfdump adding:• User ID itemnfdump –r CESNET/2012-04-20/13/nfcapd.201204201300 "user 1100"• Extension for “progress bar”nfdump -p /tmp/pbar -R 2012-04-24 -a -A srcip "host 147.229.3.15"[root@coyote ~]# cat /tmp/pbarProcessing 2012-04-24/00/nfcapd.201204240055: 14%• NAV : some parts written in java– developers are working on moving to python J
Future work II• Secure transport of the flow data• Reliable transport of the flow data– Currently we lost data when the network goes down– “Small” buffer on the probe side
Page 1 and 2: Tomáš Podermański, tpoder@cis.vu
Page 5 and 6: Traffic for a single host• Filter
Page 7 and 8: Extended flow record• Basic flow
Page 9 and 10: Extended flow record• Basic flow
Page 11 and 12: Where to get proper information•
Page 13 and 14: Where to get proper information•
Page 15: Architecture of the system• netfl
Page 18 and 19: netflow collectorNetFlov9
Page 22 and 23: Architecture of the system• Netwo
Page 24 and 25: Architecture of the system• Home
Page 26 and 27: Architektura DR systému• CLI int

Flow Based Monitoring of IPv6 - cesnet

Create successful ePaper yourself

Delete template?

Save as template?