Home page logo

nanog logo nanog mailing list archives

RE: Why do you use Netflow
From: "Mark Borchers" <mborchers () igillc com>
Date: Tue, 19 Aug 2003 15:36:16 -0500

What are you looking at when you analyze this data?  I've 
seen uses 
such as top 10 destination AS's for peering evaluations.  
What else?  


Also to get some application-specific bandwidth utilization numbers.

I wonder how do you map your netflow data to applications?
(if I understood correctly what you´re saying)

The caveat is that Netflow is useful for this purpose on a
smallish test/research network, in which port numbers and/or
combinations of port numbers and server addresses correllate to 
an application, which is what I happen to be doing.  Naturally 
on a public backbone you'd want to substitute "port-specific" 
for "application-specific".

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]