Building a better NetFlow

  title={Building a better NetFlow},
  author={Cristian Estan and Ken Keys and David J Moore and George Varghese},
Network operators need to determine the composition of the traffic mix on links when looking for dominant applications, users, or estimating traffic matrices. Cisco's NetFlow has evolved into a solution that satisfies this need by reporting flow records that summarize a sample of the traffic traversing the link. But sampled NetFlow has shortcomings that hinder the collection and analysis of traffic data. First, during flooding attacks router memory and network bandwidth consumed by flow records… CONTINUE READING
Highly Influential
This paper has highly influenced 35 other papers. REVIEW HIGHLY INFLUENTIAL CITATIONS
Highly Cited
This paper has 428 citations. REVIEW CITATIONS


Publications citing this paper.
Showing 1-10 of 272 extracted citations

ANLS: Adaptive Non-Linear Sampling Method for Accurate Flow Size Measurement

IEEE Transactions on Communications • 2012
View 18 Excerpts
Highly Influenced

A Framework for Efficient Class-based Sampling

Mohit Saxena Ramana
View 15 Excerpts
Highly Influenced

Key technologies of network traffic measurement

2014 IEEE 5th International Conference on Software Engineering and Service Science • 2014
View 6 Excerpts
Highly Influenced

Monitoring latency with OpenFlow

Proceedings of the 9th International Conference on Network and Service Management (CNSM 2013) • 2013
View 5 Excerpts
Highly Influenced

Estimation of data traffic flows from aggregate measurements

Mathematical and Computer Modelling • 2010
View 11 Excerpts
Highly Influenced

Fast Filtered Sampling

View 4 Excerpts
Highly Influenced

A Framework for Efficient Class-Based Scheduling

IEEE INFOCOM 2009 • 2009
View 7 Excerpts
Highly Influenced

429 Citations

Citations per Year
Semantic Scholar estimates that this publication has 429 citations based on the available data.

See our FAQ for additional information.


Publications referenced by this paper.
Showing 1-6 of 6 references

Inverting sampled traffic

IEEE/ACM Transactions on Networking • 2003
View 3 Excerpts
Highly Influenced

The spread of the sapphire/slammer worm

D. Moore, V. Paxson, +3 authors N. Weaver
Technical report, • 2003
View 3 Excerpts
Highly Influenced

Receiver-Driven Layered Multicast

View 3 Excerpts
Highly Influenced

On adaptive sampling

Computing • 1990
View 3 Excerpts
Highly Influenced

Similar Papers

Loading similar papers…