Export Citations
Save this search
Please login to be able to save your searches and receive alerts for new content matching your search criteria.
- rfcMarch 2024
RFC 9565: An Update to the tcpControlBits IP Flow Information Export (IPFIX) Information Element
RFC 7125 revised the tcpControlBits IP Flow Information Export (IPFIX) Information Element that was originally defined in RFC 5102 to reflect changes to the TCP header control bits since RFC 793. However, that update is still problematic for ...
- research-articleSeptember 2019
Security Monitoring of IoT Communication Using Flows
ECBS '19: Proceedings of the 6th Conference on the Engineering of Computer Based SystemsArticle No.: 18, Pages 1–9https://doi.org/10.1145/3352700.3352718Network monitoring is an important part of network management that collects valuable metadata describing active communication protocols, network transmissions, bandwidth utilization, and the most communicating nodes. Traditional IP network monitoring ...
- rfcApril 2019
RFC 8549: Export of BGP Community Information in IP Flow Information Export (IPFIX)
By introducing new Information Elements (IEs), this document extends the existing BGP-related IEs to enable IP Flow Information Export (IPFIX) to export BGP community information, including the BGP Standard Communities defined in RFC 1997, BGP Extended ...
- articleOctober 2017
Flow-Based Web Application Brute-Force Attack and Compromise Detection
Journal of Network and Systems Management (JNSM), Volume 25, Issue 4Pages 735–758https://doi.org/10.1007/s10922-017-9421-4In the early days of network and service management, researchers paid much attention to the design of management frameworks and protocols. Since then the focus of research has shifted from the development of management technologies towards the analysis ...
- rfcMay 2017
RFC 8038: Exporting MIB Variables Using the IP Flow Information Export (IPFIX) Protocol
This document specifies a way to complement IP Flow Information Export (IPFIX) Data Records with Management Information Base (MIB) objects, avoiding the need to define new IPFIX Information Elements for existing MIB objects that are already fully ...
-
- articleJuly 2016
Flow-Based Network Management: A Report from the IRTF NMRG Workshop
Journal of Network and Systems Management (JNSM), Volume 24, Issue 3Pages 746–753https://doi.org/10.1007/s10922-016-9365-0This is the report on the Workshop on Flow-Based Network Management, held within the 37th IRTF NMRG meeting, during IETF 93, on 24th July 2015, in Prague, Czech Republic. Following the tradition of the IRTF NMRG, the workshop focused on technologies, ...
- ArticleSeptember 2014
PhiGARo: Automatic Phishing Detection and Incident Response Framework
ARES '14: Proceedings of the 2014 Ninth International Conference on Availability, Reliability and SecurityPages 295–302https://doi.org/10.1109/ARES.2014.46We present a comprehensive framework for automatic phishing incident processing and work in progress concerning automatic phishing detection and reporting. Our work is based upon the automatic phishing incident processing tool PhiGARo which locates ...
- rfcJune 2014
RFC 7270: Cisco-Specific Information Elements Reused in IP Flow Information Export (IPFIX)
This document describes some additional IP Flow Information Export (IPFIX) Information Elements in the range of 1-127, which is the range compatible with field types used by NetFlow version 9 in RFC 3954, as specified in the IPFIX Information Model in RFC ...
- rfcMay 2014
RFC 7133: Information Elements for Data Link Layer Traffic Measurement
This document describes Information Elements related to the data link layer. They are used by the IP Flow Information Export (IPFIX) protocol for encoding measured data link layer traffic information.
- articleJanuary 2014
Flow-inspector: a framework for visualizing network flow data using current web technologies
Computing (CMPT), Volume 96, Issue 1Pages 15–26https://doi.org/10.1007/s00607-013-0286-4New web technologies led to the development of browser applications for data analysis. Modern browser engines allow for building interactive real-time visualization applications that enable efficient ways to understand complex data. We present Flow-...
- rfcOctober 2012
RFC 6727: Definitions of Managed Objects for Packet Sampling
This memo defines a portion of the Management Information Base (MIB) for use with network management protocols in the Internet community. In particular, it describes extensions to the IPFIX-SELECTOR-MIB module. For IP Flow Information eXport (IPFIX) ...
- rfcJuly 2012
RFC 6645: IP Flow Information Accounting and Export Benchmarking Methodology
This document provides a methodology and framework for quantifying the performance impact of the monitoring of IP flows on a network device and the export of this information to a Collector. It identifies the rate at which the IP flows are created, ...
- ArticleJune 2012
Flow information storage assessment using IPFIXcol
AIMS'12: Proceedings of the 6th IFIP WG 6.6 international autonomous infrastructure, management, and security conference on Dependable Networks and ServicesPages 155–158https://doi.org/10.1007/978-3-642-30633-4_21Network monitoring has became a significant part of network management. Each environment and type of network have their specific, different needs. To allow network traffic monitoring in various environments, a necessity of flexible approach thus grows. ...
- rfcJune 2012
RFC 6615: Definitions of Managed Objects for IP Flow Information Export
This document defines managed objects for IP Flow Information eXport (IPFIX). These objects provide information for monitoring IPFIX Exporters and IPFIX Collectors, including basic configuration information. [STANDARDS-TRACK]
- articleDecember 2011
Report of the Third Workshop on the Usage of NetFlow/IPFIX in Network Management
Journal of Network and Systems Management (JNSM), Volume 19, Issue 4Pages 529–535https://doi.org/10.1007/s10922-011-9204-2The Network Management Research Group (NMRG) organized in 2010 the Third Workshop on the Usage of NetFlow/IPFIX in Network Management, as part of the 78th IETF Meeting in Maastricht. Yearly organized since 2007, the workshop is an opportunity for people ...
- ArticleSeptember 2011
Flow monitoring experiences at the ethernet-layer
EUNICE'11: Proceedings of the 17th international conference on Energy-aware communicationsPages 134–145Flow monitoring is a scalable technology for providing summaries of network activity. Being deployed at the IP-layer, it uses fixed flow definitions, based on fields of the IP-layer and higher layers. Since several backbone network operators are ...
- ArticleJune 2011
Using of time characteristics in data flow for traffic classification
This paper describes a protocol detection using statistic information about a flow extended by packet sizes and time characteristics, which consist of packet inter-arrival times. The most common way of network traffic classification is a deep packet ...
- articleJune 2011
Report of the Second Workshop on the Usage of NetFlow/IPFIX in Network Management
Journal of Network and Systems Management (JNSM), Volume 19, Issue 2Pages 298–304https://doi.org/10.1007/s10922-010-9163-zFollowing the success of the First Workshop on the Usage of NetFlow/IPFIX (Pras et al. in J Netw Syst Manag 17(4), 2009) in 2008, the European EMANICS Network of Excellence organized a second workshop in October 2009, held at Jacobs University Bremen. ...
- rfcMay 2011
RFC 6235: IP Flow Anonymization Support
This document describes anonymization techniques for IP flow data and the export of anonymized data using the IP Flow Information Export (IPFIX) protocol. It categorizes common anonymization schemes and defines the parameters needed to describe them. It ...
- ArticleApril 2011
Monitoring of tunneled IPv6 traffic using packet decapsulation and IPFIX
TMA'11: Proceedings of the Third international conference on Traffic monitoring and analysisPages 64–71IPv6 is being deployed but many Internet Service Providers have not implemented its support yet. Most of the end users have IPv6 ready computers but their network doesn't support native IPv6 connection so they are forced to use transition mechanisms to ...