[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: nFlow

At 12:58 AM 5/23/2003, Luca Deri wrote:
>Dear all,
>it's a while I follow the activities of this group. I have decided to define a new flow format named nFlow (see http://www.nflow.org/) that extends the NetFlow format adding new features such as:
>- support of both IPv4 and IPv6.
>- compressed (RFC 1950, 1952) flow format for reducing network traffic.
>- flow authentication, protection against forging, and non repudiation (RFC 1321).
>- flow payload information.
>- accurate ICMP access.
>- packet sampling for easing probe scalability.
>- performance (network and application) information.
>- MPLS and VLAN tag info.
>
>I have defined it mostly because NetFlow is not rich enough for ntop (a GPL passive network monitoring tool). Currently I have a GPL software Netflow+nFlow probe (http://www.ntop.org/nProbe.html) and a collector available. I plan to make ntop nFlow-aware in the near future.
>
>I would like to know (I have asked this Juergen a while ago but unfortunately I have not received a reply so far) whether:
>- we could work together so that IPFIX and nFlow could merge
>- I could show up at the next IETF meeting in Vienna and present nFlow
>
>Your feedback is appreciated.

Isn't this something that is more appropriate for the IPFIX WG?
The PSAMP WG plans to use the IPFIX reporting protocol, but
PSAMP deals only with the export of packet samples.  The concepts
of flow classification and aggregation are outside the scope
of the PSAMP WG.  It is possible that the IPFIX WG is interested in
flow export based on statistics extrapolated from sampled
packets (e.g., sampled netflow).


>Regards, Luca

Andy



>-- 
>Luca Deri <deri@ntop.org>       http://luca.ntop.org/
>Hacker: someone who loves to program and enjoys being
>clever about it - Richard Stallman
>
>
>--
>to unsubscribe send a message to psamp-request@ops.ietf.org with
>the word 'unsubscribe' in a single line as the message text body.
>archive: <http://ops.ietf.org/lists/psamp/>


--
to unsubscribe send a message to psamp-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/psamp/>