nanog mailing list archives

Re: netflow analysis for jitter and packet loss?


From: Roland Dobbins <rdobbins () arbor net>
Date: Wed, 2 Feb 2011 10:38:50 +0700


On Feb 2, 2011, at 7:19 AM, Shacolby Jackson wrote:

Any suggestions?

Flow telemetry is extremely useful, but it isn't really suited for looking at things like jitter and delay, and 
out-of-order packets.  It can be used to identify loss in many instances, as well as communications relationships, 
bps/pps, source/destination distribution, macro-level application behaviors, statistical and behavioral anomalies, DDoS 
attacks, et. al., but you really need packet-level classification/inspection to get the level of detail you mention.

------------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>



Current thread: