Publication details
Hardware Accelerated FlowMon Probe
| Authors | |
|---|---|
| Year of publication | 2007 |
| Type | Appeared in Conference without Proceedings |
| MU Faculty or unit | |
| Citation | |
| Description | The poster presents an autonomous hardware-accelerated network monitoring probe. It is intended for collecting information about IP flows much like some routers do. The advantage of a stand-alone probe is its adaptability, mobility and throughput. For instance, the probe supports NetFlow v5 and v9 protocols and can also filter and export flow records to several collectors. While different sampling types are implemented, sampling is not mandatory as the probe is able to handle gigabit traffic at line rate in both directions and for all packet sizes. The flow cache is able to store up to 256000 simultaneous flow records, which is comparable to high-end backbone routers. Besides describing parameters of the probe, the poster gives a closer overview of the system architecture. The probe is based on a commodity PC running Linux OS with a network acceleration card. The card accelerates the time-critical parts of the flow monitoring process. The PC is responsible for the export of the collected flow statistics. Results from deploying the probes in the CESNET2 network and collecting network statistics are presented and compared to other available solutions. The FlowMon probe is being developed within the JRA2 activity of the GN2 project. |