Extracting Performance Metrics from NetFlow in Enterprise Networks
|
|
|
- Valerie Murphy
- 8 years ago
- Views:
Transcription
1 Extracting Performance Metrics from NetFlow in Enterprise Networks 2nd EMANICS Workshop on NetFlow/IPFIX Usage Jochen Kögel 8. October 2009 Universität Stuttgart Institute of Communication Networks and Computer Engineering (IKR) Prof. Dr.-Ing. Andreas Kirstädter
2 Overview Motivation and scenario Monitoring in enterprise networks What could be extracted from NetFlow? Metrics extraction process Evaluation and results Conclusion and outlook 2
3 Motivation and scenario Monitoring in global enterprise networks Global MPLS-Cloud connects several locations Network metrics (RTT, delay, loss,...) monitored by active probes (partly, no full mesh) Unsampled NetFlow (v5) from many routers (own routers + customer edge) Application level: Response time measured by active probing (E2E-probes) Correlating network metrics with application response times: NetFlow-based? Extract metrics from NetFlow-Data to enrich/validate/replace active measurements? 3
4 Motivation and scenario What could be extracted from NetFlow Records? Round-Trip-Time (RTT) data from one router (depends on routing) One way delay data from several routers (+ synchronized clocks) Packet loss Flow contention (roughly) Partly covered in QoS-Monitoring-Section of RFC 5472 (IPFIX Applicability), but no investigation on flow-level so far (?) Constraints Incomplete NetFlow data (table contention, packet loss) Rerouting, ECMP, disjoint paths 4
5 Metrics extraction process Preprocessing Steps 1. Join flow records of same forward flow based on 5-Tuple (JoinedFlow) 2. Build FlowAcrossExporters: associate JoinedFlows of all exporters 3. Associate forward and reverse flows (BiFlow) RTT Extraction 1. Take complete BiFlows 2. Calculate start-flow record offset (mid-flow offset also contains server response time) Delay Extraction 1. Step through JoinedFlows of FlowAcrossExporters 2. Calculate delay between every exporter pair based on start time 5
6 Evaluation scenario NetFlow data NetFlow data of 3 days taken for this evaluation Filter: TCP-Connections of E2E-Probe and IP SLA flows IP SLA (active measurement between routers) Three UDP measurement flows per minute Reports on average RTT every five minutes 6
7 Evaluation 1: NetFlow-RTT/E2E vs. IP SLA RTT Comparison of active measurement results and NetFlow-RTT RTT measurements in different directions, but same path 7
8 Evaluation 1: NetFlow-RTT/E2E vs. IP SLA RTT IPSLA vs. TCP-Flows of E2E-Probes IP SLA/Netflow RTT Comparison Netflow RTT, E2E Probe IPSLA RTT Netflow/IPSLA RTT,E2E Comparison IPSLA RTT smoothed Netflow RTT, E2E Probe, smoothed RTT/ms 450 RTT/ms Left: without further processing, right: smoothed (window 15) 1-4 NetFlow-RTT/E2E samples per IPSLA-sample NetFlow-RTT timestamp may differ several seconds from IPSLA-Measurement time Closer look on flows from IPSLA-Measurement 8
9 Evaluation 2: NetFlow-RTT/IP SLA vs. IP SLA RTT Compare RTT gained from IP SLA with RTT calculated from measurement flows 9
10 Evaluation 2: NetFlow-RTT/IP SLA vs. IP SLA RTT Netflow/IP SLA RTT Comparison Netflow RTT IP SLA RTT Netflow/IP SLA RTT Comparison IPSLA RTT smoothed Netflow RTT smoothed RTT/ms RTT/ms Left: without further processing, right: smoothed (window 20) ~15 NetFlow-RTT samples per IP SLA sample IP SLA flows reuse 5-Tuple matching problem reason for difference? 10
11 Evaluation 3: NetFlow-RTT vs. NetFlow-delay 1. Calculate NetFlow-delays independently of NetFlow-RTT 2. Match Netflow delay samples based on timestamp and sum up Direct comparison possible (if R3 and R4 were inaccurate, we would notice) 11
12 Evaluation 3: NetFlow-RTT vs. NetFlow-delay Delay of complete path: R1 - R Netflow RTT/Netflow delay sum (R1 R4) Netflow delay sum Netflow RTT/E2E Difference between RTT, delay sum (6 outliers dropped) RTT/ms samples Difference/ms Sum of forward and reverse delay almost equal to NetFlow RTT Delay contribution of segment from R4 to reverse proxy negligible 12
13 Evaluation 3: NetFlow-RTT vs. NetFlow-delay Delay of partial path: R1 - R Netflow RTT/Netflow delay sum (R1 R3) Netflow delay sum Netflow RTT/E2E Difference between RTT, delay sum (15 outliers dropped) RTT/ms samples Difference/ms Delay contribution of segment between R3 and R4 measurable 13
14 Conclusion and Outlook Conclusion NetFlow as basis for performance metrics: "QoS Monitoring" and server response Comparison to RTT of IP SLA data: differences, but trends are the same Comparison of NetFlow-delay and NetFlow-RTT delay contribution of network segments measurable Outlook Comparison on a large scale Improved algorithms to deal with missing or inaccurate records Compensation of record loss by combining information from several routers Take knowledge about record loss into account (IPFIX Reliability Statistics?) Is active per-packet measurement required at all? 14
Passively Detecting Remote Connectivity Issues Using Flow Accounting. 2nd EMANICS Workshop on Netflow/IPFIX usage in network management
Passively Detecting Remote Connectivity Issues Using Flow Accounting 2nd EMANICS Workshop on Netflow/IPFIX usage in network management 08.10.2009 Jacobs University Bremen, Germany Tim Kleefass, Simon Leinen
Monitoring WAAS Using Cisco Network Analysis Module. Information About NAM CHAPTER
CHAPTER 5 Monitoring WAAS Using Cisco Network Analysis Module This chapter describes Cisco Network Analysis Module (NAM), which you can use to monitor your WAAS devices. This chapter contains the following
Wireshark Developer and User Conference
Wireshark Developer and User Conference Using NetFlow to Analyze Your Network June 15 th, 2011 Christopher J. White Manager Applica6ons and Analy6cs, Cascade Riverbed Technology cwhite@riverbed.com SHARKFEST
Distributed monitoring of IP-availability
IPLU-II Seminar 08.02.2008 1 Distributed monitoring of IP-availability Jorma Kilpi, VTT February 8, 2008 IPLU-II Seminar 08.02.2008 2 Availability vs. IP-Availability In this presentation Availability
TE in action. Some problems that TE tries to solve. Concept of Traffic Engineering (TE)
1/28 2/28 TE in action S-38.3192 Verkkopalvelujen tuotanto S-38.3192 Network Service Provisioning Networking laboratory 3/28 4/28 Concept of Traffic Engineering (TE) Traffic Engineering (TE) (Traffic Management)
NetFlow/IPFIX Various Thoughts
NetFlow/IPFIX Various Thoughts Paul Aitken & Benoit Claise 3 rd NMRG Workshop on NetFlow/IPFIX Usage in Network Management, July 2010 1 B #1 Application Visibility Business Case NetFlow (L3/L4) DPI Application
Advanced Computer Networks IN2097. 1 Dec 2015
Chair for Network Architectures and Services Technische Universität München Advanced Computer Networks IN2097 1 Dec 2015 Prof. Dr.-Ing. Georg Carle Chair for Network Architectures and Services Department
Processing of Flow Accounting Data in Java: Framework Design and Performance Evaluation
Processing of Flow Accounting Data in Java: Framework Design and Performance Evaluation Jochen Kögel and Sebastian Scholz Institute of Communication Networks and Computer Engineering (IKR) University of
EE627 Lecture 22. Multihoming Route Control Devices
EE627 Lecture 22 Multihoming Route Control Devices 1 Multihoming Connect to multiple ISPs Provide reliability from access link/isp failures Potential for load balancing Intelligent Route Control Devices
STANDPOINT FOR QUALITY-OF-SERVICE MEASUREMENT
STANDPOINT FOR QUALITY-OF-SERVICE MEASUREMENT 1. TIMING ACCURACY The accurate multi-point measurements require accurate synchronization of clocks of the measurement devices. If for example time stamps
Flow Analysis Versus Packet Analysis. What Should You Choose?
Flow Analysis Versus Packet Analysis. What Should You Choose? www.netfort.com Flow analysis can help to determine traffic statistics overall, but it falls short when you need to analyse a specific conversation
An API for dynamic firewall control and its implementation for Linux Netfilter
An API for dynamic firewall control and its implementation for Linux Netfilter 3. Essener Workshop "Neue Herausforderungen in der Netzsicherheit" Jochen Kögel, Sebastian Kiesel, Sebastian Meier jochen.koegel@ikr.uni-stuttgart.de
IPV6 流 量 分 析 探 讨 北 京 大 学 计 算 中 心 周 昌 令
IPV6 流 量 分 析 探 讨 北 京 大 学 计 算 中 心 周 昌 令 1 内 容 流 量 分 析 简 介 IPv6 下 的 新 问 题 和 挑 战 协 议 格 式 变 更 用 户 行 为 特 征 变 更 安 全 问 题 演 化 流 量 导 出 手 段 变 化 设 备 参 考 配 置 流 量 工 具 总 结 2 流 量 分 析 简 介 流 量 分 析 目 标 who, what, where,
Internet Infrastructure Measurement: Challenges and Tools
Internet Infrastructure Measurement: Challenges and Tools Internet Infrastructure Measurement: Challenges and Tools Outline Motivation Challenges Tools Conclusion Why Measure? Why Measure? Internet, with
Research on Errors of Utilized Bandwidth Measured by NetFlow
Research on s of Utilized Bandwidth Measured by NetFlow Haiting Zhu 1, Xiaoguo Zhang 1,2, Wei Ding 1 1 School of Computer Science and Engineering, Southeast University, Nanjing 211189, China 2 Electronic
PANDORA FMS NETWORK DEVICES MONITORING
NETWORK DEVICES MONITORING pag. 2 INTRODUCTION This document aims to explain how Pandora FMS can monitor all the network devices available in the market, like Routers, Switches, Modems, Access points,
Viete, čo robia Vaši užívatelia na sieti? Roman Tuchyňa, CSA
Viete, čo robia Vaši užívatelia na sieti? Roman Tuchyňa, CSA What is ReporterAnalyzer? ReporterAnalyzer gives network professionals insight into how application traffic is impacting network performance.
Introduction. The Inherent Unpredictability of IP Networks # $# #
Introduction " $ % & ' The Inherent Unpredictability of IP Networks A major reason that IP became the de facto worldwide standard for data communications networks is its automated resiliency based on intelligent
PANDORA FMS NETWORK DEVICE MONITORING
NETWORK DEVICE MONITORING pag. 2 INTRODUCTION This document aims to explain how Pandora FMS is able to monitor all network devices available on the marke such as Routers, Switches, Modems, Access points,
Chapter 4. VoIP Metric based Traffic Engineering to Support the Service Quality over the Internet (Inter-domain IP network)
Chapter 4 VoIP Metric based Traffic Engineering to Support the Service Quality over the Internet (Inter-domain IP network) 4.1 Introduction Traffic Engineering can be defined as a task of mapping traffic
Analysis of SIP Traffic Behavior with NetFlow-based Statistical Information
Analysis of SIP Traffic Behavior with NetFlow-based Statistical Information Changyong Lee, Hwankuk-Kim, Hyuncheol Jeong, Yoojae Won Korea Information Security Agency, IT Infrastructure Protection Division
TFTP TRIVIAL FILE TRANSFER PROTOCOL OVERVIEW OF TFTP, A VERY SIMPLE FILE TRANSFER PROTOCOL FOR SIMPLE AND CONSTRAINED DEVICES
TFTP - Trivial File TFTP Transfer Protocol TRIVIAL FILE TRANSFER PROTOCOL OVERVIEW OF TFTP, A VERY SIMPLE FILE TRANSFER PROTOCOL FOR SIMPLE AND CONSTRAINED DEVICES Peter R. Egli INDIGOO.COM 1/10 Contents
Gaining Operational Efficiencies with the Enterasys S-Series
Gaining Operational Efficiencies with the Enterasys S-Series Hi-Fidelity NetFlow There is nothing more important than our customers. Gaining Operational Efficiencies with the Enterasys S-Series Introduction
IP Network Monitoring and Measurements: Techniques and Experiences
IP Network Monitoring and Measurements: Techniques and Experiences Philippe Owezarski LAAS-CNRS Toulouse, France Owe@laas.fr 1 Outline 4 Introduction 4 Monitoring problematic 8Only based on network administration
Metrics One Way. Two way. Availability Other metrics (R, BW,..?) latency packet loss Jitter delay variation. extensions of one-way metrics
Metrics One Way Two way latency packet loss Jitter delay variation extensions of one-way metrics Availability Other metrics (R, BW,..?) 10/3/2005 MIT IQD Meeting - Oct 4-5,2005 1 Jitter Delay variation
EQ-BGP: an efficient inter-domain QoS routing protocol
EQ-BGP: an efficient inter-domain QoS routing protocol Andrzej Beben Institute of Telecommunications Warsaw University of Technology Nowowiejska 15/19, 00-665 Warsaw, Poland abeben@tele.pw.edu.pl Abstract
Scalable Extraction, Aggregation, and Response to Network Intelligence
Scalable Extraction, Aggregation, and Response to Network Intelligence Agenda Explain the two major limitations of using Netflow for Network Monitoring Scalability and Visibility How to resolve these issues
The Performance of Measurement-Based Overlay Networks
The Performance of Measurement-Based Overlay Networks Daniel Bauer, Sean Rooney, Paolo Scotton, Ilias Iliadis, Sonja Buchegger IBM Research Säumerstrasse 4 CH-8803 Rüschlikon/Switzerland Measurement Based
Network Monitoring Based on IP Data Flows
Network Monitoring Based on IP Data Flows Best Practice Document Produced by CESNET led working group on Network monitoring (CBPD131) Author:MartinŽádník March2010 TERENA 2010. All rights reserved. Document
Limitations of Packet Measurement
Limitations of Packet Measurement Collect and process less information: Only collect packet headers, not payload Ignore single packets (aggregate) Ignore some packets (sampling) Make collection and processing
Network Monitoring Based on IP Data Flows Best Practice Document
Network Monitoring Based on IP Data Flows Best Practice Document Produced by CESNET led working group on Network monitoring (CBPD131) Authors: Martin Žádník March 2010 TERENA 2010. All rights reserved.
Managing Incompleteness, Complexity and Scale in Big Data
Managing Incompleteness, Complexity and Scale in Big Data Nick Duffield Electrical and Computer Engineering Texas A&M University http://nickduffield.net/work Three Challenges for Big Data Complexity Problem:
04 Internet Protocol (IP)
SE 4C03 Winter 2007 04 Internet Protocol (IP) William M. Farmer Department of Computing and Software McMaster University 29 January 2007 Internet Protocol (IP) IP provides a connectionless packet delivery
Improving our Evaluation of Transport Protocols. Sally Floyd Hamilton Institute July 29, 2005
Improving our Evaluation of Transport Protocols Sally Floyd Hamilton Institute July 29, 2005 Computer System Performance Modeling and Durable Nonsense A disconcertingly large portion of the literature
From NetFlow to IPFIX the evolution of IP flow information export
From NetFlow to IPFIX the evolution of IP flow information export presented by Carsten Schmoll - Fraunhofer FOKUS - Berlin, DE Elisa Boschi - Hitachi Europe - Zurich, CH Brian Trammell - CERT/NetSA - Pittsburgh,
The ISP Column A monthly column on all things Internet
The ISP Column A monthly column on all things Internet Just How Good are You? Measuring Network Performance February 2003 Geoff Huston If you are involved in the operation of an IP network, a question
HPAM: Hybrid Protocol for Application Level Multicast. Yeo Chai Kiat
HPAM: Hybrid Protocol for Application Level Multicast Yeo Chai Kiat Scope 1. Introduction 2. Hybrid Protocol for Application Level Multicast (HPAM) 3. Features of HPAM 4. Conclusion 1. Introduction Video
Service Level Monitoring with Nagios. National Technical University of Athens Network Operations Center
Service Level Monitoring with Nagios Athanasios Douitsis Dimitrios Kalogeras National Technical University of Athens Network Operations Center Outline Introduction Design & Architecture Implementation
Monitoring and analyzing audio, video, and multimedia traffic on the network
Monitoring and analyzing audio, video, and multimedia traffic on the network Slavko Gajin slavko.gajin@rcub.bg.ac.rs AMRES Academic Network of Serbia AMRES Academic Network of Serbia RCUB - Belgrade University
The Power of SA as a SLM Tool
1 1 The Power of SA as a SLM Tool Building Scalable SLM Solutions Session 2 Agenda Customer Requirements Solution Overview Available Capabilities Example Deployment Summary 3 Customer Requirements 4 Customer
Monitoring of Tunneled IPv6 Traffic Using Packet Decapsulation and IPFIX
Monitoring of Tunneled IPv6 Traffic Using Packet Decapsulation and IPFIX Martin Elich 1,3, Matěj Grégr 1,2 and Pavel Čeleda1,3 1 CESNET, z.s.p.o., Prague, Czech Republic 2 Brno University of Technology,
Network Monitoring and Traffic CSTNET, CNIC
Network Monitoring and Traffic Analysis in CSTNET Chunjing Han Aug. 2013 CSTNET, CNIC Topics 1. The background of network monitoring 2. Network monitoring protocols and related tools 3. Network monitoring
Standardizing IP Traffic Flow Measurement at the IETF
Standardizing IP Traffic Flow Measurement at the IETF Tanja Zseby (FhGFOKUS, zseby@fokus.fhg.de) Jürgen Quittek (NEC Europe Ltd., quittek@ccrle.nec.de) Outline FhG FOKUS Standardization of IP Traffic Flow
LOW OVERHEAD CONTINUOUS MONITORING OF IP NETWORK PERFORMANCE
LOW OVERHEAD CONTINUOUS MONITORING OF IP NETWORK PERFORMANCE Mandis Beigi, Raymond Jennings, and Dinesh Verma IBM Thomas J. Watson Research Center 30 Saw Mill River Road, Hawthorne, NY 10532 e-mail: {mandis,
Emulex and SevOne Provide Unparalleled Clarity for Enterprise Network Performance Management
DEPLOYMENT GUIDE Emulex and SevOne Provide Unparalleled Clarity for Enterprise Network Performance Management How to increase visibility by delivering un-sampled 10Gb/s NetFlow to SevOne NPM with EndaceFlow
Active traffic monitoring for heterogeneous environments
Active traffic monitoring for heterogeneous environments Hélder Veiga, Teresa Pinho, José Luis Oliveira, Rui Valadas, Paulo Salvador, and António Nogueira University of Aveiro/Institute of Telecommunications
Infrastructure for active and passive measurements at 10Gbps and beyond
Infrastructure for active and passive measurements at 10Gbps and beyond Best Practice Document Produced by UNINETT led working group on network monitoring (UFS 142) Author: Arne Øslebø August 2014 1 TERENA
Qcast : IP Multicast Traffic Monitoring System with IPFIX/PSAMP
IPTV Traffic Qcast : IP Multicast Traffic Monitoring System with IPFIX/PSAMP Shingo Kashima and Atsushi Kobayashi NTT Information Sharing Platform Laboratories FloCon 2010 2009 NTT Information Sharing
A VoIP Traffic Monitoring System based on NetFlow v9
A VoIP Traffic Monitoring System based on NetFlow v9 Chang-Yong Lee *1, Hwan-Kuk Kim, Kyoung-Hee Ko, Jeong-Wook Kim, Hyun- Cheol Jeong Korea Information Security Agency, Seoul, Korea {chylee, rinyfeel,
The SCAMPI Scaleable Monitoring Platform for the Internet. Baiba Kaskina TERENA baiba@terena.nl
The SCAMPI Scaleable Monitoring Platform for the Internet Baiba Kaskina TERENA baiba@terena.nl Agenda Project overview Project objectives Project partners Work packages Technical information SCAMPI architecture
End-to-End Network Centric Performance Management
End-to-End Network Centric Performance Management Gordon Bolt gbolt@opnet.com Application Performance Networks exist to support applications and services Application or End-User Experience is what matters
Flow Monitoring With Cisco Routers
CSAMP: A System for Network- Wide Flow Monitoring Vyas Sekar,Michael K. Reiter, Walter Willinger, Hui Zhang,Ramana Rao Kompella, David G. Andersen Presentation by Beletsioti Georgia Flow measurements today
Measuring IP Network Routing Convergence. A new approach to the problem
59 Measuring IP Network Routing Convergence A new approach to the problem A Blind Spot In Network Performance Monitoring Today s monitoring technologies tell us how the network performs in steady state
The next IP SLA generation Solution. Advisor SLA. Network Performance Monitoring Solution. www.hlog-qostelecom.com
The next IP SLA generation Solution Advisor SLA Network Performance Monitoring Solution 2 Advisor SLA Network Performance Monitoring Solution. Executive Summary The Advisor SLA Solution has been chosen
Quality of Service in the Internet:
Quality of Service in the Internet: Fact, Fiction, or Compromise? Paul Ferguson, Cisco Systems, Inc. Geoff Huston, Telstra What is the Expectation? Today s Internet is plagued by sporadic poor performance
Traffic Monitoring in a Switched Environment
Traffic Monitoring in a Switched Environment InMon Corp. 1404 Irving St., San Francisco, CA 94122 www.inmon.com 1. SUMMARY This document provides a brief overview of some of the issues involved in monitoring
SNMP Simple Network Measurements Please!
SNMP Simple Network Measurements Please! Matthew Roughan (+many others) 1 Outline Part I: SNMP traffic data Simple Network Management Protocol Why? How? What? Part II: Wavelets
Requirements for Simulation and Modeling Tools. Sally Floyd NSF Workshop August 2005
Requirements for Simulation and Modeling Tools Sally Floyd NSF Workshop August 2005 Outline for talk: Requested topic: the requirements for simulation and modeling tools that allow one to study, design,
Data Center Real User Monitoring
Data Center Real User Monitoring Network Performance Monitoring User Guide Release 12.3 Please direct questions about Data Center Real User Monitoring or comments on this document to: Customer Support
How to configure an Advanced Expert Probe as NetFlow Collector
created by: Rainer Bemsel Version 1.0 Dated: Jan/31/2012 There are two types of NetFlow collectors in Observer. In most cases, it will likely be the NetFlow Trending collector being configured. The Trending
Mobile Communications Chapter 9: Mobile Transport Layer
Mobile Communications Chapter 9: Mobile Transport Layer Motivation TCP-mechanisms Classical approaches Indirect TCP Snooping TCP Mobile TCP PEPs in general Additional optimizations Fast retransmit/recovery
Voice over IP Probe! for Network Operators and! Internet Service Providers
Voice over IP Probe! for Network Operators and! Internet Service Providers Product Presentation September 2011 2011 ADVENAGE GmbH Agenda Voice over IP Probe Key Facts VoIP Probe in a Nutshell Use Cases
QoS Measurements Methods and Tools
QoS Measurements Methods and Tools Contact: Jarmo prokkola Jarmo.prokkola@vtt.fi Tel: +358 20 722 2346 VTT Technical Reseach Centre of Finland Easy Wireless Workshop, IST Summit, Budapest, 05.07.2007 Network
Innovative, High-Density, Massively Scalable Packet Capture and Cyber Analytics Cluster for Enterprise Customers
Innovative, High-Density, Massively Scalable Packet Capture and Cyber Analytics Cluster for Enterprise Customers The Enterprise Packet Capture Cluster Platform is a complete solution based on a unique
Chapter 2. Literature Review
Chapter 2 Literature Review This chapter presents a literature review on Load balancing based Traffic Engineering, VoIP application, Hybrid Neuro-Fuzzy System, and Intra & Inter Domain Networks. 2.1 Load
Final for ECE374 05/06/13 Solution!!
1 Final for ECE374 05/06/13 Solution!! Instructions: Put your name and student number on each sheet of paper! The exam is closed book. You have 90 minutes to complete the exam. Be a smart exam taker -
Roland Karch 17.11.2005
DFN's Tools for Monitoring IP Performance Metrics Across Backbone Networks Roland Karch 17.11.2005 Table of Contents DFN-Labor@RRZE who are we? IPPM-DFN Measurement System that s what we do Examples: G-WiN
WAN Optimization in MPLS Networks- the Transparency Challenge!
DATE OF ISSUE May 2005 AUTHOR Efi Gat mor 103 Eisenhower Parkway Roseland, NJ 07068 USA TEL +1.888.892.1250 +1.973.618.9000 FAX +1.973.618.9254 www.expand.com WAN Optimization in MPLS Networks- the Transparency
Chuck Cranor, Ted Johnson, Oliver Spatscheck
Gigascope: How to monitor network traffic 5Gbit/sec at a time. Chuck Cranor, Ted Johnson, Oliver Spatscheck June, 2003 1 Outline Motivation Illustrative applications Gigascope features Gigascope technical
Internet Management and Measurements Measurements
Internet Management and Measurements Measurements Ramin Sadre, Aiko Pras Design and Analysis of Communication Systems Group University of Twente, 2010 Measurements What is being measured? Why do you measure?
Experimentation driven traffic monitoring and engineering research
Experimentation driven traffic monitoring and engineering research Amir KRIFA (Amir.Krifa@sophia.inria.fr) 11/20/09 ECODE FP7 Project 1 Outline i. Future directions of Internet traffic monitoring and engineering
Challenges in NetFlow based Event Logging
Challenges in NetFlow based Event Logging Stefan Künkel IsarNet sk@isarnet.de 31.03.2012 Agenda Introduction Getting Events Example NSEL What is it? Analysis Example CGN Motivation NAT overview NAT Logging
How To Measure Quality Of Service On An Hpla (Html) Website
Relationship between Quality-of-Service and Quality-of-Experience for Public Internet Service Stas Khirman (stask@narus.com) and Peter Henriksen (peterh@narus.com) Narus Inc. (http://www.narus.com) 395
NetFlow: What is it, why and how to use it? Miloš Zeković, milos.zekovic@soneco.rs. ICmyNet Chief Customer Officer Soneco d.o.o.
NetFlow: What is it, why and how to use it?, milos.zekovic@soneco.rs Soneco d.o.o. Serbia Agenda What is NetFlow? What are the benefits? How to deploy NetFlow? Questions 2 / 22 What is NetFlow? NetFlow
Flow Based Traffic Analysis
Flow based Traffic Analysis Muraleedharan N C-DAC Bangalore Electronics City murali@ncb.ernet.in Challenges in Packet level traffic Analysis Network traffic grows in volume and complexity Capture and decode
Fast Prototyping Network Data Mining Applications. Gianluca Iannaccone Intel Research Berkeley
Fast Prototyping Network Data Mining Applications Gianluca Iannaccone Intel Research Berkeley Motivation Developing new network monitoring apps is unnecessarily time-consuming Familiar development steps
IPTV Traffic Monitoring System with IPFIX/PSAMP
IPTV Traffic Monitoring System with IPFIX/PSAMP Shingo Kashima NTT Information Sharing Platform Laboratories 3rd NMRG Workshop 2010 NTT Information Sharing Platform Laboratories Outline Introduction Motivation
REAL-TIME PERFORMANCE MONITORING ON JUNIPER NETWORKS DEVICES
APPLICATION NOTE REAL-TIME PERFORMANCE MONITORING ON JUNIPER NETWORKS DEVICES Tips and Tools for Assessing and Analyzing Network Efficiency Copyright 2010, Juniper Networks, Inc. Table of Contents Table
Extreme Networks CoreFlow2 Technology TECHNOLOGY STRATEGY BRIEF
Extreme Networks CoreFlow2 Technology TECHNOLOGY STRATEGY BRIEF TECHNOLOGY STRATEGY BRIEF Extreme Networks CoreFlow2 Technology Benefits INCREASED VISIBILITY Detailed monitoring of applications, their
Efficient Transport of VoIP Firewall Control Signaling
Universität Stuttgart INSTITUT FÜR NACHRICHTENVERMITTLUNG UND DATENVERARBEITUNG Prof. Dr.-Ing. Dr. h. c. mult. P. J. Kühn INSTITUT FÜR KOMMUNIKATIONSNETZE UND RECHNERSYSTEME Prof. Dr.-Ing. Dr. h. c. mult.
TELE9752 Network Operations and Control Week 10p: Performance
TELE9752 Network Operations and Control Week 10p: Performance 2J Copyright Tim Moors 2013 1 Outline Context Other courses References FCAPS links Measuring performance Service Level Agreements (SLAs) Flow
Real-Time Traffic Engineering Management With Route Analytics
Real-Time Traffic Engineering Management With Route Analytics Executive Summary Increasing numbers of service providers and mobile operators are using RSVP-TE based traffic engineering to provide bandwidth
mbits Network Operations Centrec
mbits Network Operations Centrec The mbits Network Operations Centre (NOC) is co-located and fully operationally integrated with the mbits Service Desk. The NOC is staffed by fulltime mbits employees,
J-Flow on J Series Services Routers and Branch SRX Series Services Gateways
APPLICATION NOTE Juniper Flow Monitoring J-Flow on J Series Services Routers and Branch SRX Series Services Gateways Copyright 2011, Juniper Networks, Inc. 1 APPLICATION NOTE - Juniper Flow Monitoring
Cisco Network Foundation Protection Overview
Cisco Network Foundation Protection Overview June 2005 1 Security is about the ability to control the risk incurred from an interconnected global network. Cisco NFP provides the tools, technologies, and
Port evolution: a software to find the shady IP profiles in Netflow. Or how to reduce Netflow records efficiently.
TLP:WHITE - Port Evolution Port evolution: a software to find the shady IP profiles in Netflow. Or how to reduce Netflow records efficiently. Gerard Wagener 41, avenue de la Gare L-1611 Luxembourg Grand-Duchy
CS551 End-to-End Internet Packet Dynamics [Paxson99b]
![CS551 End-to-End Internet Packet Dynamics [Paxson99b]](/thumbs/27/11353987.jpg "CS551 End-to-End Internet Packet Dynamics [Paxson99b]")
CS551 End-to-End Internet Packet Dynamics [Paxson99b] Bill Cheng http://merlot.usc.edu/cs551-f12 1 End-to-end Packet Dynamics How do you measure Internet performance? Why do people want to know? Are ISPs
Introduction to Performance Measurements and Monitoring. Vinayak Hegde vinayakh@gmail.com @vinayakh
Introduction to Performance Measurements and Monitoring Vinayak Hegde vinayakh@gmail.com @vinayakh 1 Structure Part 1 Basics of Measurement (40 min) Part 2 Basic Statistics primer (40 min) Part 3 Measurement
NetFlow The De Facto Standard for Traffic Analytics
NetFlow The De Facto Standard for Traffic Analytics A Webinar on NetFlow and its uses in Enterprise Networks for Bandwidth and Traffic Analytics Don Thomas Jacob Technical Marketing Engineer ManageEngine
CIRA s experience in deploying IPv6
CIRA s experience in deploying IPv6 Canadian Internet Registration Authority (CIRA) Jacques Latour Director, Information Technology Ottawa, April 29, 2011 1 About CIRA The Registry that operates the Country
Towards the Science of Network Measurement. Rocky K. C. Chang The Internet Infrastructure and Security Laboratory November 20, 2012
Towards the Science of Network Measurement Rocky K. C. Chang The Internet Infrastructure and Security Laboratory November 20, 2012 Network measurement problems Topology characterization Geolocation problems
Tech Note #015. General requirements
Mazu Networks, Inc. 125 CambridgePark Dr. Cambridge, MA 02140 Phone (617) 354-9292 Fax (617) 354-9272 www.mazunetworks.com Configuring NetFlow for Profiler Tech Note #015 Product: Profiler Version: 5.5
Kevin Webb, Alex Snoeren, Ken Yocum UC San Diego Computer Science March 29, 2011 Hot-ICE 2011
Topology witching for Data Center Networks Kevin Webb, Alex noeren, Ken Yocum UC an Diego Computer cience March 29, 2011 Hot-ICE 2011 Data Center Networks Hosting myriad of applications: Big data: MapReduce
Beyond Monitoring Root-Cause Analysis
WHITE PAPER With the introduction of NetFlow and similar flow-based technologies, solutions based on flow-based data have become the most popular methods of network monitoring. While effective, flow-based
Service Placement in Network-aware Cloud Infrastructures
Service Placement in Network-aware Cloud Infrastructures Visions of Future Generation Networks (EuroView2009) Andreas Reifert andreas.reifert@ikr.uni-stuttgart.de July, 28th 2009 Universität Stuttgart
How To Provide Qos Based Routing In The Internet
CHAPTER 2 QoS ROUTING AND ITS ROLE IN QOS PARADIGM 22 QoS ROUTING AND ITS ROLE IN QOS PARADIGM 2.1 INTRODUCTION As the main emphasis of the present research work is on achieving QoS in routing, hence this
ExamPDF. Higher Quality,Better service!
ExamPDF Higher Quality,Better service! Q&A Exam : 1Y0-A21 Title : Basic Administration for Citrix NetScaler 9.2 Version : Demo 1 / 5 1.Scenario: An administrator is working with a Citrix consultant to
Cisco Catalyst 4948E NetFlow- lite
Cisco Catalyst 4948E NetFlow- lite Applica6on Visibility in Data Center Why Applica+on Visibility in Data Center Efficient Opera+on What applica6ons are consuming bandwidth Who is using them When they
Computer Networks II Master degree in Computer Engineering Exam session: 11/02/2009 Teacher: Emiliano Trevisani. Student Identification number
Computer Networks II Master degree in Computer Engineering Exam session: 11/02/2009 Teacher: Emiliano Trevisani Last name First name Student Identification number You are only allowed to use a pen and
Cisco Performance Agent Data Source Configuration in the Branch-Office Router
Deployment Guide Cisco Performance Agent Figure 1. Application visibility in all network segments using Performance Agent in branch office Cisco Performance Agent is a licensed software feature of Cisco