Implementace rozšíření standardu NetFlow o párování toků

• Title in English: Implementation of an extension of NetFlow standard by the means of flow pairing
• Authors: KRMÍČEK Vojtěch; MINAŘÍK Pavel
• Year of publication: 2010
• MU Faculty or unit: Institute of Computer Science
• Web: Stránky výzkumného projektu v rámci kterého výsledek vznikl
• Description: The subject result is a highly effective extension of a implementation of NetFlow standard (one-way traffic) on the pairing flows (request and reply) RFC 5103 (bidirectional flows). The result is implemented as a module for standard open-source collector NFSen, namely the component to receive and store NetFlow data - nfcapd. The algorithm uses a highly efficient hashing techniques and optimization for determining of requests and responses based on the combination of flags and other technical parameters. The software has been validated in a network environment, including the MU performance tests confirming the linear complexity of the algorithm. Person responsible:Jan Pavlovic, Masaryk University, Technology Trasfer Office, Zerotinovo nam. 9, 601 77 Brno, tel.: [phone], e-mail: [e-mail]

Related projects

• CYBER - Security of Czech Army Information and Communication Systems - On-line Monitoring, Visualization and Packet Filtration. Computer Incident Response Capability Development in the Cyber Defence Environment