Haddadi, H and Landa, R and Moore, AW and Bhatti, SN and Rio, M and Che, X (2008) Revisiting the Issues On Netflow Sample and Export Performance. In: Proceedings of CHINACOM 2008, Third International Conference on Communications and Networking in China. (pp. pp. 442-446). IEEE: Piscataway, US.
| PDF - Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader 254Kb |
Abstract
The high volume of packets and packet rates of traffic on some router links makes it exceedingly difficult for routers to examine every packet in order to keep detailed statistics about the traffic which is traversing the router. Sampling is commonly applied on routers in order to limit the load incurred by the collection of information that the router has to undertake when evaluating flow information for monitoring purposes. The sampling process in nearly all cases is a deterministic process of choosing 1 in every N packets on a per-interface basis, and then forming the flow statistics based on the collected sampled statistics. Even though this sampling may not be significant for some statistics, such as packet rate, others can be severely distorted. However, it is important to consider the sampling techniques and their relative accuracy when applied to different traffic patterns. In this paper, we assess the performance of the sampling process as used in NetFlow in detail, and we discuss some techniques for the compensation of loss of monitoring detail.
| Type: | Proceedings paper |
|---|---|
| Title: | Revisiting the Issues On Netflow Sample and Export Performance |
| ISBN-13: | 9781424423743 |
| Open access status: | An open access version is available from UCL Discovery |
| DOI: | 10.1109/CHINACOM.2008.4685060 |
| Publisher version: | http://dx.doi.org/10.1109/CHINACOM.2008.4685060 |
| Language: | English |
| Additional information: | ©2008 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE. |
| UCL classification: | UCL > School of BEAMS > Faculty of Engineering Science > Electronic and Electrical Engineering |
Archive Staff Only: edit this record

