Configuration Data Model for the IP Flow Information Export (IPFIX) and Packet Sampling (PSAMP) Protocols

Aitken, Paul; Claise, Benoît; Muenz, Gerhard

doi:10.17487/rfc6728

Cited by 8 publications

(7 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Providing more detailed information about the traffic has a negative impact on the monitoring process performance. Standard flow cache [19] was not designed for application data. Therefore, methods to cope with the extensive amount of data gained from application monitoring need to be researched.…”

Section: Motivationmentioning

confidence: 99%

Next Generation Application-Aware Flow Monitoring

Velan

Čeleda

2014

Monitoring and Securing Virtualized Networks and Services

View full text Add to dashboard Cite

Abstract. Deep packet inspection (DPI) and IP flow monitoring are frequently used network monitoring approaches. Although the DPI provides application visibility, detailed examination of every packet is computationally intensive. The IP flow monitoring achieves high performance by processing only packet headers, but provides less details about the traffic itself. Application-aware flow monitoring is proposed as an attempt to combine DPI accuracy and IP flow monitoring performance. However, the impacts, benefits and disadvantages of application flow monitoring have not been studied in detail yet. The work proposed in this paper attempts to rectify this lack of research. We also propose a next generation flow measurement for application monitoring. The flows will represent events within the application protocol, e.g., web page download, instead of packet stream. Finally, we will investigate the performance of different approaches to application classification and application parsing with a computational complexity in mind.

show abstract

Section: Motivationmentioning

confidence: 99%

Next Generation Application-Aware Flow Monitoring

Velan

Čeleda

2014

Monitoring and Securing Virtualized Networks and Services

View full text Add to dashboard Cite

show abstract

“…[RFC6615] specifies a MIB module for monitoring, and [RFC6728] specifies a data model for configuring and monitoring IPFIX and PSAMP-compliant devices using the Network Configuration Protocol (NETCONF). [RFC6727] specifies the PSAMP MIB module as an extension of the IPFIX SELECTOR MIB module defined in [RFC6615].…”

Section: Ipfix Documents Overviewmentioning

confidence: 99%

“…[RFC6728] specifies a configuration data model for the IPFIX and PSAMP protocols, using the Network Configuration Protocol (NETCONF). This data model covers Selection Processes, Caches, Exporting Processes, and Collecting Processes on IPFIX and PSAMP Devices, and is defined using UML (Unified Modeling Language) class diagrams and formally specified using YANG.…”

Section: Privacy Considerations For Collected Datamentioning

confidence: 99%

Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of Flow Information

Aitken¹

2013

Self Cite

View full text Add to dashboard Cite

This document specifies the IP Flow Information Export (IPFIX) protocol, which serves as a means for transmitting Traffic Flow information over the network. In order to transmit Traffic Flow information from an Exporting Process to a Collecting Process, a common representation of flow data and a standard means of communicating them are required. This document describes how the IPFIX Data and Template Records are carried over a number of transport protocols from an IPFIX Exporting Process to an IPFIX Collecting Process. This document obsoletes RFC 5101.

show abstract

“…Note that the active and inactive timeouts used to generate Original Flows, as well as the cache policy used to generate those Flows, have an effect on how meaningful either the conservative or nonconservative Flow count will be during aggregation. In general, Original Exporters using the IPFIX Configuration Model SHOULD be configured to export Flows with equal or similar activeTimeout and inactiveTimeout configuration values, and the same cacheMode, as defined in [RFC6728]. Original Exporters not using the IPFIX Configuration Model SHOULD be configured equivalently.…”

Section: External Interval Distributionmentioning

confidence: 99%