About NetFlow/IPFIX and DPI
dwhite at olp.net
Wed May 7 14:38:16 UTC 2014
On 05/07/14 15:11 +0200, Antoine Meillet wrote:
>I'm currently writing a paper for school and I talk about net neutrality
>which brings the subject of NetFlow/IPFIX.
>Should those protocols be considered as tools to perform DPI ?
That question can be taken a couple of ways. Netflow is useful for
calculating information useful to providers and operators through sampling
of data on high bandwidth links, where performing DPI is not feasible or
desired. It is not a robust solution for DPI - or analysis of higher layer
packet data, which is typically performed by a mirrored interface or an
inline box/firewall that can perform high speed forwarding.
More information about the NANOG