The Research of Netflow-Based Flow Analyzing Technology
Fei Ling-lin · Microcomputer Information · 2008
Traffic analyzing is essential for accounting user traffic and detecting anomaly traffic. Since conventional traffic analyzing tools use only TCP/UDP/IP header information, they cannot effectively classify diverse application traffic, because TCP or UDP port numbers could be used by different applications. This article discusses the characteristics and working theory of Netflow, and probes into the application and development of it.