Because of this, it is ideal for use in high-speed networks - usually those with gigabit per second speeds or higher. SFlow is unique in that it uses mandatory sampling to achieve maximum scalability. It is supported by multiple network device manufacturers and network management software vendors. As it uses sampling, it can scale to high-speed networks. It defines a packet sampling (not all traffic) technology to provide continuous statistics on any protocol (L2, 元, L4, and up to L7). SFlow is also an industry standard used for network monitoring. There are hardware-based and software-based collectors that you can choose from depending on your needs and what you're trying to accomplish at the moment. This provides an immediate view of all network traffic and, because of its real-time nature, is ideal for troubleshooting certain types of issues you may be experiencing.Īlternatively, you may choose to expert your data to a NetFlow Collector open source solution and examine it that way. Next comes the command line interface, known as CLI for short. Once a package is forwarded within a router or switch, it is examined and its attributes are broken down.Īnother important element is the NetFlow cache, which is a database where all information is condensed and stored once those packets have been examined. One of the main components of this is an IP flow, which consists of a group of packets that all contain the same IP attributes.
NetFlow follows a very straightforward process when collecting, sorting and analyzing your data. Also called a denial of service attack, a DoS attack occurs where a network is overrun with traffic unexpectedly - eventually taking it and all connected resources offline at the worst possible moment.
NetFlow collects IP traffic as it enters or exits an interface, aggregates it into flows based on IP, port, class of service, protocol and source interface providing insight on bandwidth usage monitoring, congestion, potential DoS attacks. NetFlow, introduced by Cisco and adopted by the network device industry at large, today is a widely supported standard used for network monitoring.
0 kommentar(er)
