Table of Contents
UW-Madison - FlowScan and Rate Limiting Adventures
Presentation Overview
FlowScan: A Network Traffic Reporting and Visualization Tool
Background on Flows
Sample Flows - FTP
FlowScan
Some Uses For Flowscan
Short-Term Network Analysis: Redhat 7.1 Release
Short-Term Network Analysis: DoS Detection
Short-Term Network Analysis: DoS Detection (cont)
Long Term Analysis Input/Output totals, 730 days prior to 12 May 2001
Long Term Analysis Application totals, 365 days prior to 12 May 2001
UW-Madison Napster vs. Gnutella Usage
UW-Madison Napster vs Gnutella Usage (cont)
Long Term Analysis Peering, 730 days prior to 12 May 2001
CampusIO Extension Modules Top ASNs
CampusIO Extension Modules Alerts
CampusIO Extension Modules Top Talkers
Implementing Flowscan in Large Scale (ISP) Networks
Limitations of Flow Processing: Flow Processing
Limitations of Flow Processing: Flow Exporting
Packet Sampling
Packet Sampling (cont)
The Bright Side of Packet Sampling
The Ugly Side of Packet Sampling
More Ugly Things about Packet Sampling
Statistical Accuracy of Flow Sampling: Non Sampled Model
Statistical Accuracy of Flow Sampling: Sampled Model
Conclusions on Sampling
The Future of Flow Accounting:
FlowScan
FlowScan
Controlling ResNet Traffic
Rate Limiting
Basic Types of Rate Limiting: Traffic Shaping
Basic Types of Rate Limiting: Traffic Shaping
Basic Types of Rate Limiting: Traffic Policing
Basic Types of Rate Limiting: Traffic Policing
Practical Rate-Limit Methods: Aggregate Rate-Limiting
Aggregate Rate-Limiting: Pros and Cons
Aggregate Rate-Limiting: Experiences
Aggregate Rate-Limiting: Example
Practical Rate-Limit Methods: Flow-Based Rate-Limiting
Flow-Based Rate-Limiting: Pros and Cons
Flow-Based Rate-Limiting: Experiences
Flow-Based Rate-Limiting: Example
Results of Rate-Limit Implementations
Practical Rate-Limit Methods: TCP Rate Control
TCP Rate Control: Pros and Cons
TCP Rate Control: Experiences
Rate-Limit Alternatives
Adaptive Rate Limiting
Rate Limit Links
The EndÖ?
|