YAF: Yet another flowmeter

LISA 2010 - 24th Large Installation System Administration Conference

Volumn , Issue , 2010, Pages 107-118

  Inacio, Christopher M ^a   Trammell, Brian ^b  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b ETH ZURICH   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

DATA STREAMS; FLOW MEASUREMENT;

FLOW DATA; LARGE-SCALE NETWORK; MEASUREMENT DEVICE; PACKET FORWARDING; RAPID DEPLOYMENTS; REFERENCE IMPLEMENTATION;

FLOWMETERS;

EID: 85094652598     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (26)

1. ADAMI, D., CALLEGARI, C., GIORDANO, S., PAGANO, M., AND PEPE, T. A real-time algorithm for Skype traffic detection and classification. In 9th International Conference on Wired/Wireless Networking (Sept. 2009).
2. BIANCHI, G., TEOFILI, S., AND POMPOSINI, M. New directions in privacy-preserving anomaly detection for network traffic. In NDA'08: Proceedings of the 1st ACM workshop on Network data anonymization (New York, NY, USA, 2008), ACM, pp. 11-18.
3. BONWICK, J. The slab allocator: an object-caching kernel memory allocator. In USTC'94: Proceedings of the USENIX Summer 1994 Technical Conference on USENIX Summer 1994 Technical Conference (Berkeley, CA, USA, 1994), USENIX Association, pp. 6-6.
4. CISCO SYSTEMS, INC. Cisco IOS Netflow Introduction. http://www.cisco.com/go/netflow. [Accessed 19 August 2010].
5. CISCO SYSTEMS, INC. Hyperconnectivity and the Approaching Zettabyte Era. Cisco VNI White Paper, June 2010.
6. CLAISE, B., BRYANT, S., LEINEN, S., DIETZ, T., AND TRAMMELL, B. Specification of the IP Flow Information Export Protocol. RFC 5101 (Proposed Standard), Jan. 2008.
7. CLAISE, B., SADASIVAN, G., VALLURI, V., AND DJERNAES, M. Cisco Systems NetFlow Services Export Version 9. RFC 3954 (Informational), Oct. 2004.
8. DERI, L. nprobe - netflow/ipfix network probe. http://www.ntop.org/nProbe.html, Oct 2006. [Accessed 9 August 2010].
9. DERI, L., AND SUIN, S. Effective traffic measurement using ntop. IEEE Communications Magazine (May 2000), 138-143.
10. DOUGHERTY, C. R.”Vulnerability Note VU#800113 multiple DNS implementations vulnerable to cache poisoning”. http://www.kb.cert.org/vuls/id/800113, 2009. [Accessed 27 July 2010].
11. FP7 PRISM PROJECT. PRIvacy-aware Secure Monitoring. http://www.fp7-prism.eu. [Accessed 6 August 2010].
12. GATES, C., COLLINS, M., DUGGAN, M., KOMPANEK, A., AND THOMAS, M. More netflow tools for performance and security. In LISA'04: Proceedings of the 18th USENIX conference on System administration (Berkeley, CA, USA, 2004), USENIX Association, pp. 121-132.
13. HAZEL, P. PCRE - Perl Compatible Regular Expressions. http://www.pcre.org.
14. INTERNET ASSIGNED NUMBERS AUTHORITY. IP Flow Information Export (IPFIX) Information Elements. http://www.iana.org/assignments/ipfix/.
15. MILLER, D. softflowd - fast software netflow probe. http://www.mindrot.org/projects/softflowd, Oct 2006. [Accessed 9 August 2010].
16. OPENDPI. http://www.opendpi.org. [Accessed 6 August 2010].
17. QOSIENT, LLC. Argus: Auditing Network Activity. http://www.qosient.com/argus/. [Accessed 19 August 2010].
18. QUITTEK, J., BRYANT, S., CLAISE, B., AITKEN, P., AND MEYER, J. Information Model for IP Flow Information Export. RFC 5102 (Proposed Standard), Jan. 2008.
19. ROSENBERG, J., SCHULZRINNE, H., CAMARILLO, G., JOHNSTON, A., PETERSON, J., SPARKS, R., HANDLEY, M., AND SCHOOLER, E. SIP: Session Initiation Protocol. RFC 3261 (Proposed Standard), June 2002. Updated by RFCs 3265, 3853, 4320, 4916, 5393, 5621, 5626, 5630.
20. SFLOW.ORG. sflow products - network equipment. http://www.sflow.org/products/network.php, 2010. [Accessed 9 August 2010].
21. SHANNON, C., MOORE, D., AND CLAFFY, K. C. Beyond folklore: observations on fragmented traffic. IEEE/ACM Trans. Netw. 10, 6 (2002), 709-720.
22. SHANNON, C. E. A mathematical theory of communication. Bell System Technical Journal 27 (Jul and Oct 1948), 379-423,623-656.
23. STEENBERGEN, R. A. sflow - why you should use it and like it. In 39th Meeting of the North American Network Operator's Group (NANOG 39) (Feb 2007).
24. TRAMMELL, B., AND BOSCHI, E. Bidirectional Flow Export using IP Flow Information Export. RFC 5103 (Proposed Standard), Jan. 2008.
25. TRAMMELL, B., BOSCHI, E., MARK, L., ZSEBY, T., AND WAGNER, A. Specification of the IP Flow Information Export File Format. RFC 5655 (Proposed Standard), Oct. 2009.
26. TRAMMELL, B., AND GATES, C. NAF: the NetSA Aggregate Flow Tool Suite. In 20th USENIX Large Installation System Administration Conference (LISA'06) (Dec 2006), pp. 221-231.