! JANOG36!BoF!! JANOG36!mee:ng,!Kitakyushu!!Jul!2015!
|
|
|
- Sylvia Brooks
- 7 years ago
- Views:
Transcription
1 ! JANOG36!BoF!! JANOG36!mee:ng,!Kitakyushu!!Jul!2015!
2 Introduc:on! JANOG36!mee:ng,!Kitakyushu!!Jul!2015!
3 pmacct!is!openjsource,!free,!gpl ed!sooware! libpcap MySQL PgSQL SQLite sflow NetFlow IPFIX pmacct MongoDB BerkeleyDB tee sflow BGP maps IGP memory tables flat-files RabbitMQ NetFlow IPFIX hqp://
4 Usage!scenarios!
5 Key!pmacct!nonJtechnical!facts!! 10+!years!old!project!! Can t!spell!the!name!aoer!the!second!drink!! Free,!openJsource,!independent!! Under!ac:ve!development!! Innova:on!being!introduced!! Well!deployed!around,!also!large!SPs!! Aims!to!be!the!traffic!accoun:ng!tool!closer!to! the!sp!community!needs!
6 Some!technical!facts!(1/3)!! Pluggable!architecture! Straigh^orward!to!add!support!for!new!collec:on! methods!or!backends!! An!abstrac:on!layer!allows!outJofJtheJbox!any! collec:on!method!to!interact!with!any!backend!! Both!mul:Jprocess!and!(coarse)!mul:Jthreading! Mul:ple!plugins!(of!same!or!different!type)!can!be! instan:ated!at!run:me,!each!with!own!config!!
7 Some!technical!facts!(2/3)! BGP thread Core Process Abstraction layer NetFlow thread Pipe! Pipe! MySQL!plugin! Plugins Print!plugin! (to!flatjfiles)! Observed network! Backends!
8 Some!technical!facts!(3/3)!! Pervasive!dataJreduc:on!techniques,!ie.:! Data!aggrega:on! Tagging!and!filtering! Sampling!! Ability!to!build!mul:ple!views!out!of!the!very!same! collected!network!traffic!dataset!,!ie.:! Unaggregated!to!flatJfiles!for!security!and!forensic! purposes! Aggregated!as![!<ingress!router>,!<ingress!interface>,! <BGP!nextJhop>,!<peer!des:na:on!ASN>!]!to!build!an! internal!traffic!matrix!for!capacity!planning!purposes!
9 Ne^lix!useJcase! (peering!analysis,!traffic!visibility)! JANOG36!mee:ng,!Kitakyushu!!Jul!2015!
10 Egress!BGP!hacks!! In!many!cases!too!much! traffic!to!handle!for!1,!2!or! even!4!egress!partners!! Use!of!BGP!mul:Jpath!via! different!asn s! CACHES CACHES AS40027 CACHES AS40027 CACHES AS40027 CACHES AS40027 CACHES AS40027 AS40027 CACHES CACHES AS40027 CACHES AS40027 CACHES AS40027 CACHES AS40027 CACHES AS40027 AS40027 TRANSIT #1 1/8 MX or ASR AS2906 router TRANSIT #2 2/8 3/8 TRANSIT #3 2/8 IX PEER /24 TRANSIT #4
11 On!BGP!addJpath!! A!BGP!extension!that!allows!the! adver:sement!of!mul:ple!paths!for!the!same! address!prefix!without!the!new!paths! implicitly!replacing!any!previous!ones!! DraO!at!IETF:!draOJie^JidrJaddJpathsJ09!
12 BGP!mul:Jpath,!traffic!not!only!sent!to!a!single!best!path! pmacct!was!only!aware!of!the!best!from!its!bgp!feed! BGP Multi-path The!problem! /24 [BGP/170] 3w0d 01:19:58, MED 100, localpref 200 AS path: 789 I, validation-state: unverified > to via ae12.0 [BGP/170] 3w0d 01:15:44, MED 100, localpref 100 AS path: I, validation-state: unverified > to via ae8.0 [BGP/170] 3w0d 01:13:48, MED 100, localpref 100 AS path: I, validation-state: unverified > to via ae10.0 [BGP/170] 3w0d 01:18:24, MED 100, localpref 100 AS path: I, validation-state: unverified > to via ae1.0 Traditional BGP to pmacct * / I 12!
13 BGP!addJpath!in!ac:on!! BGP!addJpath!gives!visibility!into!the!N!BGP!mul:Jpath!bestJpaths! BGP Multi-path /24 [BGP/170] 3w0d 01:19:58, MED 100, localpref 200 AS path: 789 I, validation-state: unverified > to via ae12.0 [BGP/170] 3w0d 01:15:44, MED 100, localpref 100 AS path: I, validation-state: unverified > to via ae8.0 [BGP/170] 3w0d 01:13:48, MED 100, localpref 100 AS path: I, validation-state: unverified > to via ae10.0 [BGP/170] 3w0d 01:18:24, MED 100, localpref 100 AS path: I, validation-state: unverified > to via ae1.0 BGP ADD-PATH to pmacct * / I I I I
14 NetFlow/IPFIX!and!BGP!addJpath!(1/2)!! OK,!so!we!have!visibility!in!the!N!bestJpaths!..!!..!but!how!to!map!NetFlow!traffic!onto!them?! We!don t!want!to!get!in!the!exercise!of!hashing! traffic!onto!paths!ourselves!as!much!as!possible! NetFlow!will!tell!!BGP!nextJhop!in!NetFlow!is!used! as!selector!to!:e!the!right!bgp!informa:on!to! traffic!data! Ini:ally!concerned!if!the!BGP!NextHop!in!NetFlow! would!be!of!any!use!to!determine!the!actual!path! o We!verified!it!accurate!and!consistent!across!vendors!
15 NetFlow/IPFIX!and!BGP!addJpath!(2/2)! NetFlow SrcAddr: DstAddr: NextHop: InputInt: 662 OutputInt: 953 Packets: 2 Octets: 2908 Duration: sec SrcPort: 80 DstPort: TCP Flags: 0x10 Protocol: 6 IP ToS: 0x00 SrcAS: 2906 DstAS: 789 SrcMask: 26 (prefix: /26) DstMask: 24 (prefix: /24) BGP ADD-PATH to pmacct * / I I I I 15!
16 Deployment!notes!! Mul:ple!pmacct!servers!in!various!loca:ons!! BGP!ADDJPATHS!is!being!set!up!between! routers!and!the!pmacct!servers! Sessions!configured!as!iBGP,!RRJclient! Juniper!ADDJ7!(maximum)! Cisco!ADDJALL!! NetFlow!is!being!exported!to!the!pmacct! servers:!! Mix!of!NetFlow!v5,!v9!and!IPFIX!
17 Spo:fy!useJcase! (SDN)! JANOG36!mee:ng,!Kitakyushu!!Jul!2015!
18 When!you!travel!!! Example:!Spo:fy!datacenter!in!Stockholm! Total!prefixes:!~519k! Prefixes!from!peers:!~150k! Average!#!of!ac:ve!prefixes!per!day:!~16k%! Example!explained:! Spo:fy!streams!music!to!users! Users!are!typically!served!from!the!closest!DC! Why!would!the!Spo:fy!DC!in!San!Jose!need!to! specifically!know!how!to!reach!users!in! $EU_COUNTRY!
19 Goal!of!our!work!! Make!a!selec:on!of! needed!routes!from!the!rib! so!to!be!able!to!fit!them!on!the!fib!of!a!switch!with! commodity!asics!! In!simplest!term!this!can!be!reduced!to!a!TopN! problem,!where!n!is!the!amount!of!routes!the! commodity!asic!can!fit!
20 Overview!! Transit! /0 Internet! Switch! IXP! Peers prefixes BGP!Controller!! Transit!will!send!the!default!route!to! the!internet!switch.!the!route!is! installed!by!default!in!the!fib!! We!receive!from!the!IXP!all!the!peers! prefixes.!those!are!not!installed,!they! are!forwarded!to!pmacct!! pmacct!will!receive!in!addi:on!sflow! data! Peers prefixes & sflow pmacct! Spo:fy!AP!
21 pmacct!! Transit! Internet! Switch! IXP! 2. Please, install these prefixes I got from pmacct. BGP!Controller!! pmacct!aggregates!sflow!data!using! the!bgp!informa:on!previously!sent! by!the!internet!switch!! pmacct!reports!the!flow!data!to!the! BGP!Controller!! The!BGP!controller!instructs!the! Internet!switch!to!install!those!TopN*! prefixes! Peers prefixes & sflow 1. These are the topn prefixes based on sflow data. pmacct! Spo:fy!AP! *!N!is!a!number!close!to!the!maximum!number!of!entries! that!the!fib!of!the!internet!switch!can!support!
22 Internals!
23 Results:!top!1k!routes!(1/4)!
24 Results:!top!5k!routes!(2/4)!
25 Results:!top!15k!routes!(3/4)!
26 Results:!top!30k!routes!(4/4)!
27 Deployment!notes!! Demo!run!in!Spo:fy!Stockholm!datacenter,! connected!to!netnod:! Info!gathered!but!no!actual!changes!performed!on! the!internet!router!there!! Pilot!to!be!run!very!soon!by!Spo:fy!in! coopera:on!with!a!major!ixp!in!europe!
28 WrapJup! JANOG36!mee:ng,!Kitakyushu!!Jul!2015!
29 Acknowledgments!! Elisa!Jasinska!! David!Barroso!!
30 Further!informa:on!(1/2)!! hqp:// dbarroso_plucente_waltzing_v0.5.pdf! Full!informa:on!on!the!Spo:fy!useJcase!! hqp:// Full!informa:on!on!the!Ne^lix!useJcase!! hqp:// Lucente_collec:ng_ne^low_with_pmacct_v1.2.pdf! A!tutorial!on!pmacct!
31 Further!informa:on!(2/2)!! hqp:// About!coupling!telemetry!and!BGP!! hqp://ripe61.ripe.net/presenta:ons/156jripe61jbcpj planningjandjte.pdf! About!telemetry,!traffic!matrices,!capacity!planning!&!TE!! hqp://wiki.pmacct.net/officialexamples! Compiling!instruc:ons!for!pmacct!and!quickJstart!guides!! hqp://wiki.pmacct.net/implementa:onnotes! pmacct!implementa:on!notes!(rdbms,!maintenance,! etc.)!
32 ! JANOG36!BoF!! JANOG36!mee:ng,!Kitakyushu!!Jul!2015!
NetFlow & BGP multi-path: quo vadis?
NetFlow & BGP multi-path: quo vadis? Paolo Lucente Elisa Jasinska Netnod, Stockholm Agenda About Netflix About pmacct Brief digression on BGP ADD-PATHS Putting all
NetFlow & BGP multi-path: quo vadis?
NetFlow & BGP multi-path: quo vadis? Paolo Lucente Elisa Jasinska NANOG61, Bellevue Agenda About Netflix About pmacct Brief digression on BGP ADD-PATHS Putting all
Network traffic telemetry (NetFlow, IPFIX, sflow)
Network traffic telemetry (NetFlow, IPFIX, sflow) Paolo Lucente pmacct MENOG 13 mee+ng, Kuwait City Sep 2013 Network traffic telemetry (NetFlow, IPFIX, sflow) Agenda o whoami: Paolo & pmacct o Ramblings:
EMIST Network Traffic Digesting (NTD) Tool Manual (Version I)
EMIST Network Traffic Digesting (NTD) Tool Manual (Version I) J. Wang, D.J. Miller and G. Kesidis CSE & EE Depts, Penn State EMIST NTD Tool Manual (Version I) Page 1 of 7 Table of Contents 1. Overview...
How NOC manages and controls inter-domain traffic? 5 th tf-noc meeting, Dubrovnik nino.ciurleo@garr.it
How NOC manages and controls inter-domain traffic? 5 th tf-noc meeting, Dubrovnik nino.ciurleo@garr.it Agenda Inter-domain traffic: o how does NOC monitor and control it? Common case as example: new BGP
UltraFlow -Cisco Netflow tools-
UltraFlow UltraFlow is an application for collecting and analysing Cisco Netflow data. It is written in Python, wxpython, Matplotlib, SQLite and the Python based Twisted network programming framework.
Appendix A Remote Network Monitoring
Appendix A Remote Network Monitoring This appendix describes the remote monitoring features available on HP products: Remote Monitoring (RMON) statistics All HP products support RMON statistics on the
Collec+ng NetFlow with pmacct
Collec+ng NetFlow with pmacct Paolo Lucente pmacct MENOG 13 mee+ng, Kuwait City Sep 2013 Collec+ng NetFlow with pmacct Agenda o o o o o Introduction pmacct architecture & benefits example, data aggregation:
Configuring NetFlow Data Export (NDE)
49 CHAPTER Prerequisites for NDE, page 49-1 Restrictions for NDE, page 49-1 Information about NDE, page 49-2 Default Settings for NDE, page 49-11 How to Configure NDE, page 49-11 Note For complete syntax
Wireshark Developer and User Conference
Wireshark Developer and User Conference Using NetFlow to Analyze Your Network June 15 th, 2011 Christopher J. White Manager Applica6ons and Analy6cs, Cascade Riverbed Technology cwhite@riverbed.com SHARKFEST
Collec'ng NetFlow with pmacct
Collec'ng NetFlow with pmacct Paolo Lucente pmacct SEE 3 mee'ng, Sofia Apr 2014 Presenta'on history 1.1: MENOG 13 mee'ng, Kuwait City, Sep 2013 1.2: SEE 3 mee'ng, Sofia, Apr 2014 Collec'ng NetFlow with
Netflow Application Upgrade
Netflow Application Upgrade 1 Agenda What is netflow? Existing Netflow Applications Searching for New Netflow Application(s) Recommended Netflow Applications Pricing 2 What is netflow? Observation point:
pmacct: introducing BGP natively into a NetFlow/sFlow collector
pmacct: introducing BGP natively into a NetFlow/sFlow collector Paolo Lucente the pmacct project AS286 http://www.pmacct.net/ SwiNOG #19 meeting, Berne, 29 th Sep 2009 pmacct:
BGP Router Startup Message Flow
LEG: Brief BGP Router Startup Message Flow This sequence diagram was generated with EventStudio System Designer (http://www.eventhelix.com/eventstudio). The Border Gateway Protocol (BGP) is an inter-autonomous
Traffic analysis with NetFlow
Traffic analysis with NetFlow Paolo Lucente http://www.pmacct.net/ RIPE Regional meeting, Dubrovnik Sep 2011 Traffic analysis with NetFlow Agenda o o whoami: Paolo & pmacct Ramblings:
Symantec Event Collector for Cisco NetFlow version 3.7 Quick Reference
Symantec Event Collector for Cisco NetFlow version 3.7 Quick Reference Symantec Event Collector for Cisco NetFlow Quick Reference The software described in this book is furnished under a license agreement
basic BGP in Huawei CLI
basic BGP in Huawei CLI BGP stands for Border Gateway Protocol. It is widely used among Internet Service Providers to make core routing decisions on the Internet. The current BGP version is BGP-4 defined
Net-flow. PacNOG 6 Nadi, Fiji
Net-flow PacNOG 6 Nadi, Fiji Agenda Netflow What it is and how it works Uses and Applications Vendor Configurations/ Implementation Cisco and Juniper Flow-tools Architectural issues Software, tools etc
DDoS Mitigation Techniques
DDoS Mitigation Techniques Ron Winward, ServerCentral CHI-NOG 03 06/14/14 Consistent Bottlenecks in DDoS Attacks 1. The server that is under attack 2. The firewall in front of the network 3. The internet
An overview of traffic analysis using NetFlow
The LOBSTER project An overview of traffic analysis using NetFlow Arne Øslebø UNINETT Arne.Oslebo@uninett.no 1 Outline What is Netflow? Available tools Collecting Processing Detailed analysis security
SonicOS 5.8: NetFlow Reporting
SonicOS 5.8: NetFlow Reporting Document Scope Rapid growth of IP networks has created interest in new business applications and services. These new services have resulted in increases in demand for network
---------------------------------------------------------------------------------
Offline Flow Analysis Tool (OFAT) Version 2 Documentation, March 9, 2010 OFAT.pbs Year, month, day, router name, UVA_gap, UVA_min_flowlength, UVA_long, UVA_short, code directory, output directory yyyy
BGP overview BGP operations BGP messages BGP decision algorithm BGP states
BGP overview BGP operations BGP messages BGP decision algorithm BGP states 1 BGP overview Currently in version 4. InterAS (or Interdomain) routing protocol for exchanging network reachability information
APNIC elearning: BGP Basics. Contact: training@apnic.net. erou03_v1.0
erou03_v1.0 APNIC elearning: BGP Basics Contact: training@apnic.net Overview What is BGP? BGP Features Path Vector Routing Protocol Peering and Transit BGP General Operation BGP Terminology BGP Attributes
http://www.cisco.com/en/us/products//hw/switches/ps4324/index.html http://www.cisco.com/en/us/products/ps6350/index.html
CHAPTER 54 Supervisor Engine 6-E and Catalyst 4900M chassis do not support Netflow; it is only supported on Supervisor Engine IV, Supervisor Engine V, Supervisor Engine V-10GE, or WS-F4531. This chapter
Flow Analysis Versus Packet Analysis. What Should You Choose?
Flow Analysis Versus Packet Analysis. What Should You Choose? www.netfort.com Flow analysis can help to determine traffic statistics overall, but it falls short when you need to analyse a specific conversation
NFQL: A Tool for Querying Network Flow Records [6]
![NFQL: A Tool for Querying Network Flow Records [6]](/thumbs/33/16133063.jpg "NFQL: A Tool for Querying Network Flow Records [6]")
NFQL: A Tool for Querying Network Flow Records [6] nfql.vaibhavbajpai.com Vaibhav Bajpai, Johannes Schauer, Corneliu Claudiu Prodescu, Jürgen Schönwälder {v.bajpai, j.schauer, c.prodescu, j.schoenwaelder@jacobs-university.de
SonicOS 5.8: NetFlow Reporting
SonicOS 5.8: NetFlow Reporting Document Scope Rapid growth of IP networks has created interest in new business applications and services. These new services have resulted in increases in demand for network
APNIC elearning: BGP Attributes
APNIC elearning: BGP Attributes Contact: training@apnic.net erou04_v1.0 Overview BGP Attributes Well-known and Optional Attributes AS Path AS Loop Detection ibgp and ebgp Next Hop Next Hop Best Practice
Understanding and Optimizing BGP Peering Relationships with Advanced Route and Traffic Analytics
Understanding and Optimizing BGP Peering Relationships with Advanced Route and Traffic Analytics WHITE PAPER Table of Contents Introduction 3 Route-Flow Fusion 4 BGP Policy Visibility 5 Traffic Visibility
How To Use Netflow On Cisco Ios V2.3.4.4 (V2.4) And V2 (V3.3) (V1.4).4.2.2) (Cisco V
NetFlow Services and Applications Whitepaper Kevin Delgadillo, Cisco IOS Product Marketing Table of Contents 1.0 Introduction 2.0 NetFlow Definitions and Benefits 2.1 NetFlow Cache Management and Data
Edge-1#show ip route 10.1.2.0. Routing entry for 10.1.2.0/24. Known via "bgp 65001", distance 200, metric 0. Tag 65300, type internal
Edge-1#show ip route 10.1.2.0 Routing entry for 10.1.2.0/24 Known via "bgp 65001", distance 200, metric 0 Tag 65300, type internal Last update from 172.16.0.22 00:03:31 ago Routing Descriptor Blocks: *
Monitoring and Troubleshooting BGP Neighbor Sessions
Application Note Monitoring and Troubleshooting BGP Neighbor Sessions Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408 745 2000 or 888 JUNIPER www.juniper.net Part Number:
NetFlow FlowAnalyzer Overview
CHAPTER 1 FlowAnalyzer Overview This chapter describes the FlowAnalyzer system and its components. This system is used to read, analyze, and display switching data collected by the FlowCollector application.
BGP and Traffic Engineering with Akamai. Christian Kaufmann Akamai Technologies MENOG 14
BGP and Traffic Engineering with Akamai Christian Kaufmann Akamai Technologies MENOG 14 The Akamai Intelligent Platform The world s largest on-demand, distributed computing platform delivers all forms
Cisco IOS Flexible NetFlow Technology
Cisco IOS Flexible NetFlow Technology Last Updated: December 2008 The Challenge: The ability to characterize IP traffic and understand the origin, the traffic destination, the time of day, the application
Monitoring BGP and Route Leaks using OpenBMP and Apache Kafka
Monitoring BGP and Route Leaks using OpenBMP and Apache Kafka Tim Evens (tievens@cisco.com) NANOG-65 Traditional Method: VTY (cli/netconf/xml) Data is polled instead of pushed (not real-time) Large queries
AUTOMATED SYSTEM FOR LOAD-BALANCING EBGP PEERS
AUTOMATED SYSTEM FOR LOAD-BALANCING EBGP PEERS By BRIAN T. WALLACE A THESIS PRESENTED TO THE GRADUATE SCHOOL OF THE UNIVERSITY OF FLORIDA IN PARTIAL FULFILLMENT OF THE REQUIREMENTS FOR THE DEGREE OF MASTER
E6998-02: Internet Routing
E6998-02: Internet Routing Lecture 13 Border Gateway Protocol, Part II John Ioannidis AT&T Labs Research ji+ir@cs.columbia.edu Copyright 2002 by John Ioannidis. All Rights Reserved. Announcements Lectures
BGP Best Path Selection Algorithm
BGP Best Path Selection Algorithm Document ID: 13753 Contents Introduction Prerequisites Requirements Components Used Conventions Why Routers Ignore Paths How the Best Path Algorithm Works Example: BGP
Enabling NetFlow on Virtual Switches ESX Server 3.5
Technical Note Enabling NetFlow on Virtual Switches ESX Server 3.5 NetFlow is a general networking tool with multiple uses, including network monitoring and profiling, billing, intrusion detection and
pmacct: introducing BGP na2vely into a NetFlow/sFlow collector
pmacct: introducing BGP na2vely into a NetFlow/sFlow collector Paolo Lucente pmacct http://www.pmacct.net/ Netnod 2012 spring meeting, Stockholm, 17 th Feb 2012 Square 0 NetFlow
The Value of Flow Data for Peering Decisions
The Value of Flow Data for Peering Decisions Hurricane Electric IPv6 Native Backbone Massive Peering! Martin J. Levy Director, IPv6 Strategy Hurricane Electric 22 nd August 2012 Introduction Goal of this
Border Gateway Protocol BGP4 (2)
Border Gateway Protocol BGP4 (2) Professor Richard Harris School of Engineering and Advanced Technology (SEAT) Presentation Outline Border Gateway Protocol - Continued Computer Networks - 1/2 Learning
TEIN2 Measurement and Monitoring Workshop Netflow. Bruce.Morgan@aarnet.edu.au
TEIN2 Measurement and Monitoring Workshop Netflow Bruce.Morgan@aarnet.edu.au Passive Measurements - Netflow Netflow Setting up Netflow on a router Using Netflow Establishing exports Configuring a collector
Overview. Why use netflow? What is a flow? Deploying Netflow Performance Impact
Netflow 6/12/07 1 Overview Why use netflow? What is a flow? Deploying Netflow Performance Impact 2 Caveats Netflow is a brand name like Kleenex. It was developed by Cisco Juniper uses the term cflowd for
Configuring NetFlow and NetFlow Data Export
This module contains information about and instructions for configuring NetFlow to capture and export network traffic data. NetFlow capture and export are performed independently on each internetworking
Securing and Monitoring BYOD Networks using NetFlow
Securing and Monitoring BYOD Networks using NetFlow How NetFlow can help with Security Analysis, Application Detection and Traffic Monitoring Don Thomas Jacob Technical Marketing Engineer ManageEngine
CISCO IOS NETFLOW AND SECURITY
CISCO IOS NETFLOW AND SECURITY INTERNET TECHNOLOGIES DIVISION FEBRUARY 2005 1 Cisco IOS NetFlow NetFlow is a standard for acquiring IP network and operational data Benefits Understand the impact of network
Building A Cheaper Peering Router. (Actually it s more about buying a cheaper router and applying some routing tricks)
Building A Cheaper Peering Router (Actually it s more about buying a cheaper router and applying some routing tricks) Tom Scholl nlayer Communications, Inc. 1 What s this all about?
NetFlow Tracker Overview. Mike McGrath x ccie CTO mike@crannog-software.com
NetFlow Tracker Overview Mike McGrath x ccie CTO mike@crannog-software.com 2006 Copyright Crannog Software www.crannog-software.com 1 Copyright Crannog Software www.crannog-software.com 2 LEVELS OF NETWORK
Watch your Flows with NfSen and NFDUMP 50th RIPE Meeting May 3, 2005 Stockholm Peter Haag
Watch your Flows with NfSen and NFDUMP 50th RIPE Meeting May 3, 2005 Stockholm Peter Haag 2005 SWITCH What I am going to present: The Motivation. What are NfSen and nfdump? The Tools in Action. Outlook
Load balancing and traffic control in BGP
DD2491 p2 2011 Load balancing and traffic control in BGP Olof Hagsand KTH CSC 1 Issues in load balancing Load balancing: spread traffic on several paths instead of a single. Why? Use resources better Can
Flow Based Traffic Analysis
Flow based Traffic Analysis Muraleedharan N C-DAC Bangalore Electronics City murali@ncb.ernet.in Challenges in Packet level traffic Analysis Network traffic grows in volume and complexity Capture and decode
Data Center Use Cases and Trends
Data Center Use Cases and Trends Amod Dani Managing Director, India Engineering & Operations http://www.arista.com Open 2014 Open Networking Networking Foundation India Symposium, January 31 February 1,
NetFlow/IPFIX Various Thoughts
NetFlow/IPFIX Various Thoughts Paul Aitken & Benoit Claise 3 rd NMRG Workshop on NetFlow/IPFIX Usage in Network Management, July 2010 1 B #1 Application Visibility Business Case NetFlow (L3/L4) DPI Application
NetFlow Services and Applications
WHITE PAPER NetFlow Services and Applications Introduction Rapid growth in Internet and intranet deployment and usage has created a major shift in both corporate and consumer computing paradigms. This
8. 網路流量管理 Network Traffic Management
8. 網路流量管理 Network Traffic Management Measurement vs. Metrics end-to-end performance topology, configuration, routing, link properties state active measurements active routes active topology link bit error
Cisco IOS NetFlow Version 9 Flow-Record Format
White Paper Cisco IOS NetFlow Version 9 Flow-Record Format Last updated: May 0 Overview Cisco IOS NetFlow services provide network administrators with access to information concerning IP flows within their
BGP and Traffic Engineering with Akamai. Caglar Dabanoglu Akamai Technologies AfPIF 2015, Maputo, August 25th
BGP and Traffic Engineering with Akamai Caglar Dabanoglu Akamai Technologies AfPIF 2015, Maputo, August 25th AGENDA Akamai Intelligent Platform Peering with Akamai Traffic Engineering Summary Q&A The Akamai
CS 457 Lecture 19 Global Internet - BGP. Fall 2011
CS 457 Lecture 19 Global Internet - BGP Fall 2011 Decision Process Calculate degree of preference for each route in Adj-RIB-In as follows (apply following steps until one route is left): select route with
Case Study: Instrumenting a Network for NetFlow Security Visualization Tools
Case Study: Instrumenting a Network for NetFlow Security Visualization Tools William Yurcik* Yifan Li SIFT Research Group National Center for Supercomputing Applications (NCSA) University of Illinois at
UNIVERSITY OF OSLO Department of Informatics. Passive Asset Detection using NetFlow. Master thesis. Mats Erik Klepsland
UNIVERSITY OF OSLO Department of Informatics Passive Asset Detection using NetFlow Master thesis Mats Erik Klepsland February 14, 2012 Abstract Computer networks are growing, making it difficult to keep
NetFlow-Lite offers network administrators and engineers the following capabilities:
Solution Overview Cisco NetFlow-Lite Introduction As networks become more complex and organizations enable more applications, traffic patterns become more diverse and unpredictable. Organizations require
BGP FORGOTTEN BUT USEFUL FEATURES. Piotr Wojciechowski (CCIE #25543)
BGP FORGOTTEN BUT USEFUL FEATURES Piotr Wojciechowski (CCIE #25543) ABOUT ME Senior Network Engineer MSO at VeriFone Inc. Previously Network Solutions Architect at one of top polish IT integrators CCIE
What network engineers can learn from web developers when thinking SDN.
What network engineers can learn from web developers when thinking SDN. NETNOD Meeting October 2015 Thomas Mangin Director at various shops ( Exa Networks, IXLeeds, LINX ) Also Developer, Network Engineer,
Fluke Networks NetFlow Tracker
Fluke Networks NetFlow Tracker Quick Install Guide for Product Evaluations Pre-installation and Installation Tasks Minimum System Requirements The type of system required to run NetFlow Tracker depends
BGP Basics. BGP Uses TCP 179 ibgp - BGP Peers in the same AS ebgp - BGP Peers in different AS's. 64512-65535 Private BGP ASN. BGP Router Processes
BGP Basics BGPv4 - RFC 4271 - IPv6 support Path vector routing protocol EGP Routing between AS'es Classless Transit Area - Area used to reach other areas. Requires full routing table (no default routes).
How To Load Balance On A Bgg On A Network With A Network (Networking) On A Pc Or Ipa On A Computer Or Ipad On A 2G Network On A Microsoft Ipa (Netnet) On An Ip
Globally Distributed Content (Using BGP to Take Over the World) Horms (Simon Horman) horms@vergenet.net November 2001 http://supersparrow.org/ 1 Introduction Electronic content is becoming increasingly
OpenDaylight Project Proposal Dynamic Flow Management
OpenDaylight Project Proposal Dynamic Flow Management Ram (Ramki) Krishnan, Varma Bhupatiraju et al. (Brocade Communications) Sriganesh Kini et al. (Ericsson) Debo~ Dutta, Yathiraj Udupi (Cisco) 1 Table
CS551 External v.s. Internal BGP
CS551 External v.s. Internal BGP Bill Cheng http://merlot.usc.edu/cs551-f12 1 Exterior vs. Interior World vs. me EGP vs. IGP Little control vs. complete administrative control BGP (and GGP, Hello, EGP)
Load balancing and traffic control in BGP
DD2491 p2 2009/2010 Load balancing and traffic control in BGP Olof Hagsand KTH /CSC 1 Issues in load balancing Load balancing: spread traffic on several paths instead of a single. Why? Use resources better
IPV6 流 量 分 析 探 讨 北 京 大 学 计 算 中 心 周 昌 令
IPV6 流 量 分 析 探 讨 北 京 大 学 计 算 中 心 周 昌 令 1 内 容 流 量 分 析 简 介 IPv6 下 的 新 问 题 和 挑 战 协 议 格 式 变 更 用 户 行 为 特 征 变 更 安 全 问 题 演 化 流 量 导 出 手 段 变 化 设 备 参 考 配 置 流 量 工 具 总 结 2 流 量 分 析 简 介 流 量 分 析 目 标 who, what, where,
SDX Project Updates GEC 20
SDX Project Updates GEC 20 Georgia Tech Team: Russ Clark, Nick Feamster, Arpit Gupta Ron Hutchins, Cas D Angelo, Siva Jayaraman! June 23, 2014! Project Goals Enable and support SDX research in the GENI
NetFlow Aggregation. Feature Overview. Aggregation Cache Schemes
NetFlow Aggregation This document describes the Cisco IOS NetFlow Aggregation feature, which allows Cisco NetFlow users to summarize NetFlow export data on an IOS router before the data is exported to
Routing Protocol - BGP
Routing Protocol - BGP BGP Enterprise Network BGP ISP AS 3000 AS 2000 BGP is using between Autonomous Systems BGP(cont.) RFC 1771(BGPv4) Support CIDR Transfer the AS information to reach destination Using
How To Stop A Ddos Attack On A Network From Tracing To Source From A Network To A Source Address
Inter-provider Coordination for Real-Time Tracebacks Kathleen M. Moriarty 2 June 2003 This work was sponsored by the Air Force Contract number F19628-00-C-002. Opinions, interpretations, conclusions, and
IPv6 network management. 6DEPLOY. IPv6 Deployment and Support
IPv6 network management 6DEPLOY. IPv6 Deployment and Support 1 Contributions Simon Muyal, RENATER Bernard Tuy, RENATER Jérôme Durand, RENATER Ralf Wolter, Cisco Patrick Grossetête, Cisco 10/28/2010 IPv6
IPv6 network management. Where and when?
IPv6 network management 1 Contributions Simon Muyal, RENATER Bernard Tuy, RENATER Jérôme Durand, RENATER Ralf Wolter, Cisco Patrick Grossetête, Cisco Munechika Sumikawa, Hitachi Patrick Paul, 6WIND 2 Agenda
DD2491 p1 2008. Load balancing BGP. Johan Nicklasson KTHNOC/NADA
DD2491 p1 2008 Load balancing BGP Johan Nicklasson KTHNOC/NADA Dual home When do you need to be dual homed? How should you be dual homed? Same provider. Different providers. What do you need to have in
Understanding Route Aggregation in BGP
Understanding Route Aggregation in BGP Document ID: 5441 Contents Introduction Prerequisites Requirements Components Used Conventions Network Diagram Aggregate Without the as set Argument Aggregate with
The Internet. Internet Technologies and Applications
The Internet Internet Technologies and Applications Aim and Contents Aim: Review the main concepts and technologies used in the Internet Describe the real structure of the Internet today Contents: Internetworking
Scalable Extraction, Aggregation, and Response to Network Intelligence
Scalable Extraction, Aggregation, and Response to Network Intelligence Agenda Explain the two major limitations of using Netflow for Network Monitoring Scalability and Visibility How to resolve these issues
On integrating Software-Defined Networking within existing routing systems
On integrating Software-Defined Networking within existing routing systems Laurent Vanbever Princeton University Stanford University November, 13 2013 On integrating Software-Defined Networking within
BGP Link Bandwidth. Finding Feature Information. Prerequisites for BGP Link Bandwidth
The Border Gateway Protocol (BGP) Link Bandwidth feature is used to advertise the bandwidth of an autonomous system exit link as an extended community. This feature is configured for links between directly
Network Monitoring and Management NetFlow Overview
Network Monitoring and Management NetFlow Overview These materials are licensed under the Creative Commons Attribution-Noncommercial 3.0 Unported license (http://creativecommons.org/licenses/by-nc/3.0/)
Viete, čo robia Vaši užívatelia na sieti? Roman Tuchyňa, CSA
Viete, čo robia Vaši užívatelia na sieti? Roman Tuchyňa, CSA What is ReporterAnalyzer? ReporterAnalyzer gives network professionals insight into how application traffic is impacting network performance.
Who is Generating all This Traffic?
Who is Generating all This Traffic? Network Monitoring in Practice Luca Deri Who s ntop.org? Started in 1998 as open-source monitoring project for developing an easy to use passive monitoring
Sources and Applications of. Performance and Security- Augmented Flow Data
Sources and Applications of Performance and Security- Augmented Flow Data Avi Freedman, CEO FloCon 2016 January 2016 Background: NetFlow/IPFIX/sFlow NetFlow is: A 20-year old technology now supported in
2. What is the maximum value of each octet in an IP address? A. 28 B. 255 C. 256 D. None of the above
CCNA1 V3.0 Mod 10 (Ch 8) 1. How many bits are in an IP C. 64 2. What is the maximum value of each octet in an IP A. 28 55 C. 256 3. The network number plays what part in an IP A. It specifies the network
Programmable Networking with Open vswitch
Programmable Networking with Open vswitch Jesse Gross LinuxCon September, 2013 2009 VMware Inc. All rights reserved Background: The Evolution of Data Centers Virtualization has created data center workloads
F root anycast: What, why and how. João Damas ISC
F root anycast: What, why and how João Damas ISC Overview What is a root server? What is F? What is anycast? F root anycast. Why? How does ISC do it? What is f.root-servers.net? One the Internet s official
Class of Service (CoS) in a global NGN
Class of Service (CoS) in a global NGN Zukunft der Netze Chemnitz 2009 8. Fachtagung des ITG-FA 5.2 Thomas Martin Knoll Chemnitz University of Technology Communication Networks Phone 0371 531 33246 Email
BGP Attributes and Path Selection
BGP Attributes and Path Selection ISP Workshops Last updated 29 th March 2015 1 BGP Attributes BGP s policy tool kit 2 What Is an Attribute?... Next Hop AS Path MED...... p Part of a BGP Update p Describes
Measuring the Web: Part I - - Content Delivery Networks. Prof. Anja Feldmann, Ph.D. Dr. Ramin Khalili Georgios Smaragdakis, PhD
Measuring the Web: Part I - - Content Delivery Networks Prof. Anja Feldmann, Ph.D. Dr. Ramin Khalili Georgios Smaragdakis, PhD Acknowledgement Material presented in these slides is borrowed from presentajons
J-Flow on J Series Services Routers and Branch SRX Series Services Gateways
APPLICATION NOTE Juniper Flow Monitoring J-Flow on J Series Services Routers and Branch SRX Series Services Gateways Copyright 2011, Juniper Networks, Inc. 1 APPLICATION NOTE - Juniper Flow Monitoring
Introduction to Cisco IOS Flexible NetFlow
Introduction to Cisco IOS Flexible NetFlow Last updated: September 2008 The next-generation in flow technology allowing optimization of the network infrastructure, reducing operation costs, improving capacity
Netflow Overview. PacNOG 6 Nadi, Fiji
Netflow Overview PacNOG 6 Nadi, Fiji Agenda Netflow What it is and how it works Uses and Applications Vendor Configurations/ Implementation Cisco and Juniper Flow-tools Architectural issues Software, tools
How To Set Up Foglight Nms For A Proof Of Concept
Page 1 of 5 Foglight NMS Overview Foglight Network Management System (NMS) is a robust and complete network monitoring solution that allows you to thoroughly and efficiently manage your network. It is
and reporting Slavko Gajin slavko.gajin@rcub.bg.ac.rs
ICmyNet.Flow: NetFlow based traffic investigation, analysis, and reporting Slavko Gajin slavko.gajin@rcub.bg.ac.rs AMRES Academic Network of Serbia RCUB - Belgrade University Computer Center ETF Faculty