Content area
Full Text
J Netw Syst Manage (2009) 17:482487 DOI 10.1007/s10922-009-9138-0
Aiko Pras Ramin Sadre Anna Sperotto Tiago Fioreze David Hausheer Jrgen Schnwalder
Published online: 22 November 2009 Springer Science+Business Media, LLC 2009
Abstract To exchange experiences with, and to discuss ideas on the usage of NetFlow/IPFIX in network management, the IRTF/NMRG, together with the European EMANICS Network of Excellence, organized a one-day workshop in October 2008. This paper presents a report of that meeting.
Keywords NetFlow IPFIX IRTF/NMRG EMANICS
1 Introduction
NetFlow [1] is a technology developed by Cisco for the purpose of monitoring trafc ows within (high speed) networks. Version 9 of NetFlow is currently
Report of the joint IRTF/NMRG and Emanics workshop.
A. Pras (&) R. Sadre A. Sperotto T. Fioreze
University of Twente, Enschede, The Netherlands e-mail: [email protected]
R. Sadree-mail: [email protected]
A. Sperottoe-mail: [email protected]
T. Fiorezee-mail: [email protected]
D. Hausheer
University of Zrich, Zurich, Switzerland e-mail: [email protected]
J. Schnwalder
Jacobs University Bremen, Bremen, Germany e-mail: [email protected]
Using NetFlow/IPFIX for Network Management
123
J Netw Syst Manage (2009) 17:482487 483
standardized by the IETF under the name IP Flow Information Export (IPFIX) [2].
According to the IPFIX standard, a ow is dened as
a set of IP packets passing an observation point in the network during a certain time interval. All packets belonging to a particular ow have a set of common properties.
These properties are generally expressed in terms of ow keys, which can for example be the source and destination addresses, the source and destination port numbers and the IP protocol. All packets that share the same values for these ow keys belong to the same ow.
To exchange experiences with, and to discuss ideas on the usage of NetFlow/ IPFIX in network management, the Network Management Research Group (NMRG) [3] of the Internet Research Task Force (IRTF), together with the European EMANICS Network of Excellence [4] organized a one-day workshop on October 30th, 2008, at the Leibniz Rechenzentrum (LRZ) in Munich. The workshop was attended by about 40 people from industry and academia.
The workshop was opened by Benoit Claise, who gave an overview of NetFlow/ IPFIX. Amongst others, he discussed the differences between NetFlow versions 5, 7, 8, and 9 (IPFIX). Of these four versions, version 5 and 9 are the most...