Measurement Artifacts in NetFlow Data

  • Rick Hofstede
  • Idilio Drago
  • Anna Sperotto
  • Ramin Sadre
  • Aiko Pras
Conference paper

DOI: 10.1007/978-3-642-36516-4_1

Part of the Lecture Notes in Computer Science book series (LNCS, volume 7799)
Cite this paper as:
Hofstede R., Drago I., Sperotto A., Sadre R., Pras A. (2013) Measurement Artifacts in NetFlow Data. In: Roughan M., Chang R. (eds) Passive and Active Measurement. PAM 2013. Lecture Notes in Computer Science, vol 7799. Springer, Berlin, Heidelberg

Abstract

Flows provide an aggregated view of network traffic by grouping streams of packets. The resulting scalability gain usually excuses the coarser data granularity, as long as the flow data reflects the actual network traffic faithfully. However, it is known that the flow export process may introduce artifacts in the exported data. This paper extends the set of known artifacts by explaining which implementation decisions are causing them. In addition, we verify the artifacts’ presence in data from a set of widely-used devices. Our results show that the revealed artifacts are widely spread among different devices from various vendors. We believe that these results provide researchers and operators with important insights for developing robust analysis applications.

Keywords

Network management measurements NetFlow artifacts 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2013

Authors and Affiliations

  • Rick Hofstede
    • 1
  • Idilio Drago
    • 1
  • Anna Sperotto
    • 1
  • Ramin Sadre
    • 1
  • Aiko Pras
    • 1
  1. 1.Centre for Telematics and Information Technology, Design and Analysis of Communications Systems (DACS)University of TwenteEnschedeThe Netherlands

Personalised recommendations