nFlow

[Luca Deri <deri@ntop.org>]

Dear all,
it's a while I follow the activities of this group. I have decided to 
define a new flow format named nFlow (see http://www.nflow.org/) that 
extends the NetFlow format adding new features such as:
- support of both IPv4 and IPv6.
- compressed (RFC 1950, 1952) flow format for reducing network traffic.
- flow authentication, protection against forging, and non repudiation 
(RFC 1321).
- flow payload information.
- accurate ICMP access.
- packet sampling for easing probe scalability.
- performance (network and application) information.
- MPLS and VLAN tag info.

I have defined it mostly because NetFlow is not rich enough for ntop (a 
GPL passive network monitoring tool). Currently I have a GPL software 
Netflow+nFlow probe (http://www.ntop.org/nProbe.html) and a collector 
available. I plan to make ntop nFlow-aware in the near future.

I would like to know (I have asked this Juergen a while ago but 
unfortunately I have not received a reply so far) whether:
- we could work together so that IPFIX and nFlow could merge
- I could show up at the next IETF meeting in Vienna and present nFlow

Your feedback is appreciated.

Regards, Luca

--
Luca Deri <deri@ntop.org>	http://luca.ntop.org/
Hacker: someone who loves to program and enjoys being
clever about it - Richard Stallman


--
to unsubscribe send a message to psamp-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/psamp/>