Flow Based Monitoring of IPv6 - cesnet

More documents

Recommendations

Info

Extended flow record• Basic flow record– key fields: src/dst addess, src/dst port– non-key fields: bytes, pkts• Extended flow record– MAC address : neighbor cache (NC), arp tableNC, ARPIP addressMAC address
Extended flow record• Basic flow record– key fields: src/dst addess, src/dst port– non-key fields: bytes, pkts• Extended flow record– MAC address : neighbor cache (NC), arp table– Switch port: forwarding database (FDB)NC, ARPFDBIP address MAC address Switch port
Page 1 and 2: Tomáš Podermański, tpoder@cis.vu
Page 5 and 6: Traffic for a single host• Filter
Page 7: Extended flow record• Basic flow
Page 11 and 12: Where to get proper information•
Page 13 and 14: Where to get proper information•
Page 15: Architecture of the system• netfl
Page 18 and 19: netflow collectorNetFlov9
Page 22 and 23: Architecture of the system• Netwo
Page 24 and 25: Architecture of the system• Home
Page 26 and 27: Architektura DR systému• CLI int
Page 30 and 31: Future work• Extension of nfdump-

Flow Based Monitoring of IPv6 - cesnet

Create successful ePaper yourself

Delete template?

Save as template?