Open Access
Cisco Systems NetFlow Services Export Version 9
Benoit Claise
- Vol. 3954, pp 1-33
TLDR
This document specifies the data export format for version 9 of Cisco Systems' NetFlow services, for use by implementations on the network elements and/or matching collector programs.Abstract:
This document specifies the data export format for version 9 of Cisco
Systems' NetFlow services, for use by implementations on the
network elements and/or matching collector programs. The version 9
export format uses templates to provide access to observations of IP
packet flows in a flexible and extensible manner. A template defines a
collection of fields, with corresponding descriptions of structure and
semantics. This memo provides information for the Internet community.read more
Citations
More filters
Peer-to-peer Traffic Measurements
Dragos Ilie,David Erman +1 more
TL;DR: A measurement infrastructure geared towards P2P network traffic collection and analysis is described, and measurement results for two P1P applications: Gnutella and BitTorrent are presented.
Proceedings Article
HeteroSketch: Coordinating Network-wide Monitoring in Heterogeneous and Dynamic Networks
TL;DR: HeteroSketch as mentioned in this paper is a framework that consists of two main components: (1) a profiling tool that automatically quantifies the capabilities of arbitrary hardware by predicting their performance for sketching algorithms, and (2) an optimization framework that decides placement of measurement tasks and resource allocation for devices to meet monitoring goals while considering heterogeneous device capabilities.
Designing an accurate and efficient classification approach for network traffic monitoring
TL;DR: In recent years, knowing what information is passing through the networks is rapidly becoming more and more complex due to the ever-growing list of applications shaping today's Internet traffic.
Posted Content
Evaluating Standard Feature Sets Towards Increased Generalisability and Explainability of ML-based Network Intrusion Detection
TL;DR: In this article, two feature sets (NetFlow and CICFlowMeter) have been evaluated in terms of detection accuracy across three key datasets, i.e., CSE-CIC-IDS2018, BoT-IoT, and ToN-Iot, and the results show the superiority of the NetFlow feature set in enhancing the ML models detection accuracy of various network attacks.
Book ChapterDOI
Towards smarter probes: in-network traffic capturing and processing
TL;DR: A modular architecture is proposed that allows application specific traffic pre-processing to be carried out in a scalable and performance-effective way and interacts with the external network by enforcing strict role-based policies, thus allowing selective and proportional information disclosure.