• Corpus ID: 389146

On the Accuracy and Overhead of Cisco Sampled NetFlow

@inproceedings{Choi2005OnTA,
  title={On the Accuracy and Overhead of Cisco Sampled NetFlow},
  author={Baek-Young Choi and Supratik Bhattacharyya},
  year={2005}
}
Traffic measurement and monitoring are an important first step for network management and traffic engineering. With high-speed Internet backbone links, efficient and effective packet sampling are not only desirable, but also increasingly becoming a necessity. The Sampled NetFlow [10] is a Cisco router’s traffic measurement functionality with static packet sampling for high speed links. Since the utility of sampling depends on the accuracy and economy of measurement, it is important to… 

Figures and Tables from this paper

Packet Sampling for Network Monitoring
TLDR
An overview of all known packet sampling techniques, point out their strengths and weaknesses in terms of reliability and accuracy in the estimation in different network traffic parameters, and provide more details about the adaptive packet sampling, as a way to increase this accuracy.
Increasing data center network visibility with cisco NetFlow-Lite
TLDR
The architecture and implementation of NetFlow-Lite is described, and how it integrates with nProbe to provide a scalable and easy-to-adopt solution to provide the network visibility similar to those delivered by NetFlow.
On the Retention Rate of Top Talkers for Sampled NetFlow
TLDR
The results show that sampling NetFlow does affect the retention rates of IP addresses and top talkers in ranking lists, and the higher the sampling rate is, the greater the impact is.
Distributed Measurement-Aware Routing for Flow Utility in Routing Assisted Traffic Monitoring
TLDR
A theoretical framework for MeasuRouting and flow utility function for packet is presented and can route the components of an total flow while ensuring that the placement of monitor is compliant to original TE objectives.
Network prefix-level traffic profiling: Characterizing, modeling, and evaluation
Towards Robust Traffic Engineering in IP Networks
TLDR
It is demonstrated that it is possible to estimate the traffic matrix with good accuracy and to develop methods that optimize the routing settings to give strong and robust network performance.
Sampled Based Estimation of Network Traffic Flow Characteristics
  • Lili YangG. Michailidis
  • Mathematics, Computer Science
    IEEE INFOCOM 2007 - 26th IEEE International Conference on Computer Communications
  • 2007
TLDR
The problem of non-parametric estimation of network flow characteristics, namely packet lengths and byte sizes, based on sampled flow data is considered, and two different approaches to deal with the problem are proposed.
Study of the cost of measuring virtualized networks. (Etude du coût de mesure des réseaux virtualisés)
TLDR
This thesis considers the problem of measuring traffic in a virtualized environment and focuses on one typical scenario, virtual machines interconnected with a virtual switch, and proposes a data-driven solution able to provide optimal monitoring parameters for virtual network measurements with minimum traffic interference.
What SNMP Data Can Tell Us about Edge-to-Edge Network Performance
TLDR
The Simple Network Management Protocol (SNMP) is widely used to provide aggregated link usage data from network components, which provide a valuable source for network administrators, aiding decisions about network routing, provisioning and configuration.
...
...

References

SHOWING 1-9 OF 9 REFERENCES
Adaptive packet sampling for accurate and scalable flow measurement
TLDR
An adaptive packet sampling technique for flow-level traffic measurement with a stratification approach that provides unbiased estimation of flow size with controllable error bound, in terms of both packet and byte counts for elephant flows, while avoiding excessive oversampling.
NetFlow: information loss or win?
TLDR
This paper asks the question how and how accurately can one infer information from NetFlow, and is interested in TCP connection summaries and accurately aggregated packet and byte counts.
Elementary Sampling Theory
In connection with the notion of probability we described the following situation: Assume we have a population of observations which are related to certain measurable outcomes. This population is
Elementary Survey Sampling
TLDR
The book elucidates design adequately and illuminates Taguchi’s advances, and the extensive set of case studies that cover each topic from the previous chapters will find appeal for virtually any practitioner regardless of specific field.
Statistics: Theory and Methods
A fresh, less formal treatment of classical theoretical probability and statistics is written at an accessible level, with a Bayesian flavor and an emphasis on data and interesting applications. It
Internet Engineering Task Force, IP Flow Information Export Working Group
  • Internet Engineering Task Force, IP Flow Information Export Working Group
Internet Engineering Task Force Packet Sampling Working Group
  • Internet Engineering Task Force Packet Sampling Working Group
The Cooperative Association for Internet Data Analysis). ARTS. http://www.caida.org/tools/utilities/arts
  • The Cooperative Association for Internet Data Analysis). ARTS. http://www.caida.org/tools/utilities/arts
Adaptive Packet Sampling for Total Load Estimation
  • IEEE International Conference on Communications (ICC'03)
  • 2003