[136253] in North American Network Operators' Group
Re: netflow analysis for jitter and packet loss?
daemon@ATHENA.MIT.EDU (Roland Dobbins)
Tue Feb 1 22:39:37 2011
From: Roland Dobbins <rdobbins@arbor.net>
In-Reply-To: <AANLkTi=y+1X7Q2RmMdcamanX0xfbxjw0_Bs00JGHKXJi@mail.gmail.com>
Date: Wed, 2 Feb 2011 10:38:50 +0700
To: nanog group <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Feb 2, 2011, at 7:19 AM, Shacolby Jackson wrote:
> Any suggestions?
Flow telemetry is extremely useful, but it isn't really suited for =
looking at things like jitter and delay, and out-of-order packets. It =
can be used to identify loss in many instances, as well as =
communications relationships, bps/pps, source/destination distribution, =
macro-level application behaviors, statistical and behavioral anomalies, =
DDoS attacks, et. al., but you really need packet-level =
classification/inspection to get the level of detail you mention.
------------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
