[60907] in North American Network Operators' Group
RE: Why do you use Netflow
daemon@ATHENA.MIT.EDU (Mark Borchers)
Tue Aug 19 16:56:24 2003
From: "Mark Borchers" <mborchers@igillc.com>
To: "'Petri Helenius'" <pete@he.iki.fi>, <nanog@merit.edu>
Date: Tue, 19 Aug 2003 15:36:16 -0500
In-Reply-To: <073e01c36690$4c022a80$c302a8c0@PETEX31>
Errors-To: owner-nanog-outgoing@merit.edu
> > > What are you looking at when you analyze this data? I've=20
> seen uses=20
> > > such as top 10 destination AS's for peering evaluations. =20
> What else? =20
> > > Billing?
> > >
> > > -Lance-
> >
> > Also to get some application-specific bandwidth utilization numbers.
> >
> I wonder how do you map your netflow data to applications?
> (if I understood correctly what you=B4re saying)
The caveat is that Netflow is useful for this purpose on a
smallish test/research network, in which port numbers and/or
combinations of port numbers and server addresses correllate to=20
an application, which is what I happen to be doing. Naturally=20
on a public backbone you'd want to substitute "port-specific"=20
for "application-specific".
