netflow analysis for jitter and packet loss?

Roland Dobbins rdobbins at arbor.net
Wed Feb 2 03:38:50 UTC 2011


On Feb 2, 2011, at 7:19 AM, Shacolby Jackson wrote:

> Any suggestions?

Flow telemetry is extremely useful, but it isn't really suited for looking at things like jitter and delay, and out-of-order packets.  It can be used to identify loss in many instances, as well as communications relationships, bps/pps, source/destination distribution, macro-level application behaviors, statistical and behavioral anomalies, DDoS attacks, et. al., but you really need packet-level classification/inspection to get the level of detail you mention.

------------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>





More information about the NANOG mailing list