Practical analysis of flows with IPFIX
Luwemba, Musa (2014)
Metropolia Ammattikorkeakoulu
2014
Creative Commons Attribution 1.0 Finland
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-201405229412
https://urn.fi/URN:NBN:fi:amk-201405229412
Tiivistelmä
The goal of the project was to implement and analyze the flow table update using the IPFIX protocol. A network flow monitoring system is set up in away where the devices to be monitored send packets to a collector that analyses these packets and statistical graphs and charts are generated and displayed on a web page.
A shortlist of software was reviewed and three of the best working conditions were used to analyze the protocol. Each software has its advantages and drawbacks. The similarities and differences are reported in the report.
A network was designed with three Cisco routers and a switch and three computers connected to the switch. The computers acted as the collectors of the packets and hosted the software while the routers were the Agents that sent the packets to the computers. Traffic was generated in the network and the packets were collected and analyzed.
The collected packets, after being analyzed could clearly show the network design, how it is being utilized with graphs, pie charts and log messages that are displayed on a web page of each software type. The results obtained from the project are convincing and give a clear picture of the monitored network with all the three different types of software.
A shortlist of software was reviewed and three of the best working conditions were used to analyze the protocol. Each software has its advantages and drawbacks. The similarities and differences are reported in the report.
A network was designed with three Cisco routers and a switch and three computers connected to the switch. The computers acted as the collectors of the packets and hosted the software while the routers were the Agents that sent the packets to the computers. Traffic was generated in the network and the packets were collected and analyzed.
The collected packets, after being analyzed could clearly show the network design, how it is being utilized with graphs, pie charts and log messages that are displayed on a web page of each software type. The results obtained from the project are convincing and give a clear picture of the monitored network with all the three different types of software.