Methodologies and techniques for analysis of network flow data
Maxim Grigoriev, Andrey Bobyshev · CERN Document Server (European Organization for Nuclear Research) · 2005
Network flow data gathered at the border routers and core switches is used at Fermilab for statistical analysis of traffic patterns, passive network monitoring, and estimation of network performance characteristics.Flow data is also a critical tool in the investigation of computer security incidents.Development and enhancement of flow based tools is an on-going effort.This paper describes the most recent developments in flow analysis at Fermilab.