Re: About NetFlow/IPFIX and DPI

[Dan White <dwhite () olp net>]

On 05/07/14 15:11 +0200, Antoine Meillet wrote:
> Hello,
>
> I'm currently writing a paper for school and I talk about net neutrality
> which brings the subject of NetFlow/IPFIX.
>
> Should those protocols be considered as tools to perform DPI ?

That question can be taken a couple of ways. Netflow is useful for
calculating information useful to providers and operators through sampling
of data on high bandwidth links, where performing DPI is not feasible or
desired. It is not a robust solution for DPI - or analysis of higher layer
packet data, which is typically performed by a mirrored interface or an
inline box/firewall that can perform high speed forwarding.

--
Dan White