Measurement Artifacts in NetFlow Data

R.J. Hofstede, Idilio Drago, Anna Sperotto, R. Sadre, Aiko Pras

    Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

    16 Citations (Scopus)
    256 Downloads (Pure)

    Abstract

    Flows provide an aggregated view of network traffic by grouping streams of packets. The resulting scalability gain usually excuses the coarser data granularity, as long as the flow data reflects the actual network traffic faithfully. However, it is known that the flow export process may introduce artifacts in the exported data. This paper extends the set of known artifacts by explaining which implementation decisions are causing them. In addition, we verify the artifacts’ presence in data from a set of widely-used devices. Our results show that the revealed artifacts are widely spread among different devices from various vendors. We believe that these results provide researchers and operators with important insights for developing robust analysis applications.
    Original languageUndefined
    Title of host publication14th International Conference on Passive and Active Measurement, PAM 2013
    EditorsMatthew Roughan, Rocky Chang
    Place of PublicationBerlin
    PublisherSpringer
    Pages1-10
    Number of pages10
    ISBN (Print)978-3-642-36515-7
    DOIs
    Publication statusPublished - Mar 2013
    Event14th International Conference on Passive and Active Measurement, PAM 2013 - Hong Kong, Hong Kong
    Duration: 18 Mar 201319 Mar 2013
    Conference number: 14
    http://pam2013.comp.polyu.edu.hk/

    Publication series

    NameLecture Notes in Computer Science
    PublisherSpringer Verlag
    Volume7799
    ISSN (Print)0302-9743
    ISSN (Electronic)1611-3349

    Conference

    Conference14th International Conference on Passive and Active Measurement, PAM 2013
    Abbreviated titlePAM
    CountryHong Kong
    CityHong Kong
    Period18/03/1319/03/13
    Internet address

    Keywords

    • EWI-23200
    • METIS-296371
    • IR-85418

    Cite this

    Hofstede, R. J., Drago, I., Sperotto, A., Sadre, R., & Pras, A. (2013). Measurement Artifacts in NetFlow Data. In M. Roughan, & R. Chang (Eds.), 14th International Conference on Passive and Active Measurement, PAM 2013 (pp. 1-10). (Lecture Notes in Computer Science; Vol. 7799). Berlin: Springer. https://doi.org/10.1007/978-3-642-36516-4_1