원문
Welcome to 100G networks. Have you thought about performance monitoring?
monitoring-highspeed-networks.pdf
Monitoring a high speed network is not the same as monitoring a low bandwidth, low traffic, less number of devices and users, single office network.
With a 100G network, network admins can no longer be satisfied with just SNMP based reports about IN and OUT bandwidth usage.
The era of high speed networks may also signal the end of packet inspection tools that cannot scale up to handle huge volumes of data. But the ones that do scale up can be really expensive.
Further, packet inspection requires a huge volume of storage space and thus continuous packet capture and long term storage is not mostly undertaken.
* Netflow 관련
Netflow (or sFlow or IPFIX and all related flow formats) captures specific IP packet information from your device interfaces with no significant overhead on its performance or bandwidth.
You get information about traffic and application details, network conversations, traffic time stamp, the network path and traffic route, QoS values, MPLS labels, VLAN id etc.
Another advantage of Netflow is that the volume of data involved is not huge as it captures only specific header information from IP traffic.
Something else that Netflow can be used for is network behavior anomaly detection.